Fable
The extra signature desk in front of the silver vault
The chamber of commerce had a capable bookkeeping box. It could look up contracts, write collection letters, and generate payment orders, and at first it only made drafts for people, so everyone found it reassuring.
Later the box was connected to more keys. It could not only write letters, but also modify supplier records, issue refunds, and close customer accounts. Under the old system, whoever held the key was responsible; under the new system, the box reached out on behalf of many people at once.
The steward first had the box ask 'Are you sure?' before every action. It was fine for small matters, but for large payments, the person confirming often hadn't read the context clearly and just nodded out of habit.
Once, the box changed the receiving account based on a forged letter. It did ask "are you sure?", but it asked the clerk who was rushing along the road. The clerk thought it was just an ordinary data update, and the silver was transferred the next day.
The shopkeeper did not ban the box. He graded actions: looking up information can be done automatically, writing drafts must leave a trace, and changing accounts, making payments, or deleting records must go to the signing desk, where an authorized person reviews the evidence, risk, and impact before approving.
The signature desk is not just a button. It displays the trigger reason, source materials, policy judgment, revocability, amount, affected parties, and alternatives; when thresholds are exceeded, it must also escalate to a higher level.
From then on, the box could still rapidly advance most matters. Only actions crossing the boundary would stop at the door, waiting for confirmation from someone truly accountable.
The chamber of commerce understood that approval was not meant to slow down automation, but to reconnect irreversible, high-risk, or external-write powers to the organization's chain of responsibility. From then on, a rule was added to the signing table: whoever signs must see sufficient materials; whoever is not qualified to bear the consequences cannot authorize on the chamber's behalf based on a mere reminder. Later they also posted examples of mistaken approvals on the side of the signing table: things whose source cannot be seen, whose consequences are unknown, and which cannot be revoked—even if the action takes only an instant—must be slowed down. This table realigned speed and responsibility. This table realigned speed and responsibility; the more dangerous the action, the more someone must truly understand it before authorizing it.