
Recovery
Assume the agent will make mistakes, make them clearly fixable
What it means
Why this matters
Related patterns

Actions are reversible by default
The interface includes options like Undo or Revert for each automated change, giving users an immediate path to reverse agent decisions.
Justification for actions builds trust
A short, plain-language explanation helps users understand the rationale behind changes, reducing confusion and making recovery decisions easier.
Multiple levels of recovery available
Users can revert or approve individual changes or apply recovery to all actions at once. This offers both fine-grained control and bulk handling.

Human-in-the-loop decision making
The interface shows multiple alternatives, but waits for the user to select one. This maintains control and avoids premature execution.
Language supports co-creation
AI’s phrasing encourages collaboration reinforcing the user as the final authority, not a passive observer.
Selected output is not final
Once the user picks an option, the system surfaces editable fields (e.g., dropdowns, input controls) instead of applying the change directly. This allows precise customization.

Builds trust through predictable, gradual control
Safe, consistent defaults help users gain confidence and expand control at their own pace.
Activation/Deactivation requires explicit user intent
Features that could affect security or behavior are opt-in only. This ensures users can explore safely and expand functionality on their terms.

Manual input and escalation always available
Users can directly provide input or ask their own questions at any time, ensuring they remain in control and can override or guide the agent when needed.
Clear option to proceed independently
The “Go to terminal” button offers an immediate escape route, users can skip the assistant and take action themselves without friction or waiting for approval.