cd /news/ai-agents/i-built-an-approval-gate-for-ai-codi… · home › topics › ai-agents › article
[ARTICLE · art-156955] src=dev.to ↗ pub= topic=ai-agents verified=true sentiment=↑ positive

I Built an Approval Gate for AI Coding Agents — Meet Friday Protocol

A developer has released Friday Protocol, an open-source skill that adds an explicit approval gate to AI coding agents, requiring a human to signal approval ("OKE") before an agent moves from planning to implementation. The workflow also enforces a verification loop that returns to implementation when tests fail rather than declaring a task complete, and is designed as a reusable layer rather than a replacement for existing coding agents. The developer describes it as an evolving project and a workflow-level safeguard, not a complete solution to AI agent safety.

by read3 min views3 publishedOct 24, 2026

AI coding agents can be incredibly productive.

They can inspect a codebase, propose a solution, modify files, run tests, and keep going with very little supervision.

But I kept thinking about one question:

What if the agent starts implementing the wrong plan before I have a chance to review it?

The problem isn't necessarily that the AI cannot write code. Sometimes, the problem is that it can move from planning to execution too quickly.

I wanted a workflow where an agent could still work autonomously, but not skip the moment when a human needs to make a decision.

That idea led me to build Friday Protocol.

Friday Protocol is an open-source skill designed to introduce an approval-first workflow for AI coding agents.

The idea is straightforward:

In my workflow, OKE is the explicit approval signal.

The goal is not to make an AI agent less capable. It is to make the transition from planning to execution more deliberate and reviewable.

I could simply add a sentence to a prompt:

"Ask me before making changes."

But I wanted something more structured than relying on a general instruction.

Friday Protocol is built around explicit workflow gates, rather than treating approval as a polite suggestion.

The workflow is intended to prevent the agent from treating every request as permission to immediately execute its own interpretation of the task.

It also emphasizes verification. An agent should not declare a task complete merely because it has finished editing files.

If testing fails, the workflow should return to implementation and verification instead of pretending everything succeeded.

Of course, the actual guarantees depend on the agent environment, how the skill is invoked, and how its instructions are followed. This is a workflow-level safeguard, not a claim that every possible unsafe action is technically impossible.

Here is the simplified lifecycle:

Task Request
     |
     v
Investigation & Planning
     |
     v
Present Implementation Plan
     |
     v
Wait for Explicit Approval
     |
     v
Implementation
     |
     v
Security Checks & Testing
     |
     v
Did Verification Pass?
     |
   +---+---+
   |       |
  No      Yes
   |       |
   v       v
Fix and   Report Results
Retest    with Evidence

The important part is the approval gate before implementation and the verification loop before completion.

Friday Protocol is designed as a reusable skill, rather than a standalone application that must replace an existing coding agent.

It can be used as a workflow layer, with optional integration into my other project, MemoriaGraph, which explores contextual memory and decision support.

I am also experimenting with these ideas in a broader security operations project. However, Friday Protocol itself focuses on the workflow and approval process, not on replacing a complete security operations platform.

My aim is to make the approach reusable across supported AI coding environments. Compatibility and behavior still need to be evaluated for each environment.

One thing I have learned is that adding more instructions is not automatically the same as creating a reliable workflow.

A useful workflow needs observable checkpoints.

For example:

These questions are more useful than simply asking whether an agent claims to follow the rules.

I want to keep improving Friday Protocol through practical testing, feedback, and clearer evidence of its behavior.

It is still an evolving open-source project, and I don't consider it a complete solution to AI agent safety.

If you work with AI coding agents, I would genuinely appreciate your feedback.

Repository: Friday Protocol on GitHub

I'm particularly interested in hearing from developers who have experienced problems with agents moving too quickly, making changes before a plan is reviewed, or reporting completion without sufficient verification.

A few questions I'd love to discuss:

I'm building this from my own experience working with AI-assisted development, and I'd like to learn how other developers approach the same problem.

Thanks for reading. Feedback, criticism, and contributions are welcome.

── more in #ai-agents 4 stories · sorted by recency
── more on @friday protocol 3 stories trending now
sponsored brought to you by zahid.host 4,200+ EU-deployed projects
reading about agents? ship yours in a single git push.

Run your AI side-project on zahid.host

EU-based hosting, git-push deploys, automatic HTTPS, no cold starts. Free tier with a custom domain — perfect for shipping the agent you just read about.

$git push zahid main
→ Live at https://your-agent.zahid.host ✓
Get free account → Pricing
from €0/mo · no card required
LIVE [news/i-built-an-approval-…] indexed:0 read:3min 2026-10-24 · —