Putting the human gate inside a code conditional and putting it inside a process definition are different things. What changes when a coded agent sits as one node inside an 18-object BPMN process and the gate condition is spelled out on the diagram, plus the three problems that actually blocked the run.
Two workflows from different domains, scored on the same table, put their top scores on nodes of the same character: the ones where the human lets go. One subtraction that catches silent over-trust, the arithmetic that pushes a 3.6 node to 4.9, and why being red is not the same as reaching a human.
Scoring an AI workflow node by node needs a scoring table first. The general-failure and security axes came from OWASP, MITRE ATLAS, and MIT material, but the third axis, the one that looks between nodes, existed in no public framework. Why it got 0.4, and why only its score can rise mid-run.
Putting the human gate inside a code conditional and putting it inside a process definition are different things. What changes when a coded agent sits as one node inside an 18-object BPMN process and the gate condition is spelled out on the diagram, plus the three problems that actually blocked the run.
Two workflows from different domains, scored on the same table, put their top scores on nodes of the same character: the ones where the human lets go. One subtraction that catches silent over-trust, the arithmetic that pushes a 3.6 node to 4.9, and why being red is not the same as reaching a human.
Scoring an AI workflow node by node needs a scoring table first. The general-failure and security axes came from OWASP, MITRE ATLAS, and MIT material, but the third axis, the one that looks between nodes, existed in no public framework. Why it got 0.4, and why only its score can rise mid-run.
Pre-deployment risk review for AI workflows lives inside consulting engagements: one to two senior-weeks per workflow, not re-runnable. Why this quadrant stayed empty, when the regulatory deadlines actually land, and what remains once the check becomes a single governed run.