Skip to content

Platform · Enforce

Act on the decision — and only on the decision

A decision only matters if the action cannot run without it. GREENLIGHT routes held actions to the right people and gives each allowed action an execution visa the receiving system can check.

Part of GREENLIGHT

Why it matters

The problem Enforce solves

A decision only matters if the action that happens is the action that was decided. Enforce makes sure held actions wait for the right person, and that what finally runs is exactly what was approved.

Questions it answers

  • Who approves an action, and can they approve their own?
  • How do we know the action that ran is the one that was approved?
  • How do we handle a genuine exception without a bypass?

Where it sits

Enforce in the GREENLIGHT loop

Every consequential action moves through the same loop. Evidence from each decision informs the next policy.

How it works

Enforce, step by step

  1. 01

    Hold what needs a person

    Actions that need approval wait, with the context a reviewer needs.

  2. 02

    Route to the right approver

    In the Crelis console or in tools you already use, with separation of duties and time limits.

  3. 03

    Release once

    An approved action is released a single time and cannot be replayed.

  4. 04

    Bind it to the decision

    An execution visa ties the allowed action to what was decided.

What’s included

The 3 modules of Enforce

Enforce · 01

Human approvals

Held actions go to a reviewer with the context to decide — in the Crelis console or inside the tools you already use, such as ServiceNow and Jira.

  • Separation of duties: no one approves their own action
  • SLA timers and escalation
  • An approved action is released once — never replayed

Enforce · 02

Execution visas

Every allowed action carries a signed, single-use, short-lived visa bound to that exact action. The receiving system checks it before it writes.

  • Bound to the action, the amount and the target
  • Single-use and short-lived
  • No visa, no write — where enforcement is on

Enforce · 03

Exceptions

When a business needs a temporary exception, it is requested, approved and time-boxed — never a silent bypass.

  • Requested and approved
  • Time-boxed, with an expiry
  • Visible on the record

In practice

A protected change, approved once

A service agent asks to change a customer’s verification phone number. The request waits for fraud operations. Once approved, that change is released once, and a second, different change would need its own decision.

Illustrative scenario.

Use case

Customer operations

Who uses it

  • Approvers decide in the tools they already use
  • Operations keep the volume moving
  • Security knows there is no silent bypass
  • No self-approval

    Separation of duties is applied to every approval.

  • What was approved is what runs

    Released once, bound to the decision.

  • Exceptions on the record

    Temporary exceptions are requested, approved and time-boxed.

See it working

See Enforce on your own workflow.

We connect one agent workflow in shadow mode and walk you through every decision GREENLIGHT would make, so you can judge it on your own traffic.