Agents propose. Humans decide.
An agent can submit. It cannot approve, deny, read another's request or touch a pending one. Not blocked — absent. The buttons don't exist for it.
A lane in the MoltenRock ecosystem
Every AI wants to act. This is where it waits.
humanqueue is the private lane between an agent's intention and the real world. Intentions go in as proposals. Nothing comes out without a decision — yours, or a local AI that answers only to rules you set.
#0000
Your place in the human queue. We'll call you.
One decision, start to finish
An agent proposes. A human disposes.
The agent can't press approve on defined actions — the button doesn't exist for it. Watch a real-shaped proposal move through the lane.
- proposedAgent submits an intention
- routedLocal AI reads your policy, picks the lane
- waitingIt sits in your queue. You're notified.
- decidedYou approve — biometric, in the app
- loggedExecuted, then written down for good
agent · openclawticket #0043
Refund customer #8812 — $1,240
proposed
APPROVED
touch id
touch id
How the lane is chosen
The route is decided in private.
A small AI runs on your machine. It reads your policy and decides one thing: does this need a human? It never sees a secret and never talks to anyone it should not.
AgentSubmits a proposal. Can't approve, deny, read others, or edit what's pending.
→
Local AISandboxed. Policy-bound. Classifies the proposal and picks a lane.
→
Restricted laneSecrets, permissions, money, anything security-shaped. A human decides, and the vault enforces it.
Permitted laneContent, drafts, in-scope tasks. Reviewed and released without the long walk.
Default: restricted. Every lane starts closed and is opened on purpose.
What it stands for
Seven tickets. Take them in order.
The route is decided in private.
A local private AI reads your policy and decides what needs you. It cannot be prompted, phoned or persuaded.
Strictest wins.
Rules only get tighter. You can add a restriction; nothing — not a setting, a prompt, or an agent — can loosen one.
Credentials never cross.
Keys and passwords enter once and are never seen again. Not by an agent. Not by you. Can't leak, won't leak.
Everything is written down.
Every proposal, edit, route and decision — who, when, where — correlated and kept. Grants are audited and revocable.
Enforced by shape, not by policy.
There is no code path around the gate. It isn't a switch someone could flip. It's the structure of the thing.
It scales the way people do.
Permissions flow down. Approvals flow up. Your queue, your team's queue, and the one above it.
Everything is written down
The ledger never sleeps.
Who decided, when, on what — and which lane it took. Illustrative entries; the real ledger lives on your machine.
audit · livelocal · encrypted
The system behind the gate
humanqueue is one lane of MoltenRock.
Proposals wait in humanqueue and surface in MoltenRock Connect — reviewed, edited if you like, and approved with a touch. It's one lane of MoltenRock: the private, local system your agents answer to. That's the part you run.