Preflight
Record a bounded guardrail/policy observation before the consequential action. Keep the caller responsible for final authorization.
HumanMirror can sit around consequential agent actions without replacing your runtime, wallet, tool framework or observability backend. Export bounded decision and receipt metadata into your existing OpenTelemetry trace while keeping raw business and payment payloads inside your protected data plane.
agent intent → HumanMirror Safe Preflight → caller runtime / wallet applies its own policy → native tool, API or payment action → HumanMirror Execution Receipt → emit bounded evidence into the existing OpenTelemetry trace
Record a bounded guardrail/policy observation before the consequential action. Keep the caller responsible for final authorization.
Execute through the caller's normal runtime. A successful preflight does not prove that a downstream system executed successfully.
Attach a non-sensitive receipt identifier, status and action category to the tool/action span. Keep full payloads out of telemetry by default.
span.addEvent("humanmirror.preflight", {
"humanmirror.decision": preflight.decision,
"humanmirror.reason": preflight.reason,
"humanmirror.action_type": "crm.update",
"humanmirror.workflow_id": "refund-987"
});
// Execute through your existing runtime.
span.addEvent("humanmirror.execution_receipt", {
"humanmirror.receipt_id": receipt.receipt_id,
"humanmirror.status": receipt.status,
"humanmirror.action_type": "crm.update",
"humanmirror.workflow_id": "refund-987"
});Do not export private keys, payment signatures, raw customer records, tool payloads or other secrets through telemetry.
When your observability backend supports OpenTelemetry ingestion, map the preflight to a guardrail/policy observation and the real action to a tool/action span. Attach the execution receipt to that action span or emit a child event. Preserve normal trace context and let your own exporter decide which privacy-safe attributes leave your trust boundary.
HumanMirror is an independent operational decision/evidence layer. It does not replace your access controls, wallet policy, runtime authorization or observability governance.