MCN GUIDE #58 • MEDIUM

Where Human Review Is Non-Negotiable哪些流程必须人工完成?

A risk-based control framework for deciding when automation may assist, when a trained human must approve, and when specialist or dual authorization is mandatory.

Level
Medium
Agency controls
Core Rule
Human Accountable
Tools may assist
Review Model
Risk-Based
Consequence × uncertainty
Evidence
Decision Record
Who • what • why
Accountability cannot be automated.

Human review is non-negotiable when context, authority, consequence, or human impact cannot be reduced to a safe deterministic rule.

Automation can assemble evidence, identify anomalies and draft recommendations. It cannot hold a professional license, obtain a creator's consent, accept contractual liability, repair a damaged relationship or become accountable for a payment, publication or termination decision.

Mandatory human review

Material consequence + uncertainty or judgment + named authority + defensible decision record

Important: “human reviewed” is a control only when the reviewer is competent, independent enough, given adequate evidence and empowered to stop the action.

Section 1

Apply the Human-Review Test to the Decision

Classify the decision or action—not merely the workflow or whether AI was used. If any question reveals material exposure, add an appropriate human gate.

DimensionHuman-review question
ConsequenceCould error materially harm a person, relationship, account, reputation, legal position or finances?
IrreversibilityWould the action be difficult to undo—publication, payment, deletion, termination, access or external message?
UncertaintyDoes the decision require ambiguous facts, context, conflicting evidence, novel conditions or professional judgment?
AuthorityDoes a contract, policy, law, platform rule or stakeholder require a named person to approve?
Human impactDoes it determine opportunity, compensation, discipline, representation, privacy, safety or dignity for a person?
Adversarial riskCould manipulated inputs, fraud, prompt injection, impersonation or social engineering affect the outcome?
ExplainabilityMust the agency defend why the decision was made to a creator, brand, auditor, regulator or court?
CompetenceDoes the decision require legal, tax, financial, cultural, safety or category expertise unavailable to the tool?

Risk lens

Impact severity × likelihood × uncertainty × exposure duration ÷ detectability and reversibility

Section 2

Set Review Levels Before Choosing Automation

LevelUse whenExamplesControl
L0 • AutomatedLow consequence, deterministic, reversible and monitoredValidated formatting, routing, reminders, duplicate checksException queue and periodic control testing
L1 • Human samplingStable, low-risk output with measurable errorRoutine metadata or standard transformationsRisk-based sample plus automatic anomaly flags
L2 • Human approvalMaterial external output or operational decisionPublic content, creator shortlist, campaign report, standard payment batchNamed trained reviewer before release
L3 • Specialist approvalLegal, financial, security, regulated or high-reputation exposureClaims, rights, contracts, cross-border payments, incidentsQualified domain owner with evidence
L4 • Dual controlHigh-value, irreversible, privileged or fraud-sensitive actionPayee change, large payment, admin access, bulk export/deletionIndependent initiator and approver; technical enforcement
Risk changes with context. A routine translation can become L3 when it contains a regulated product claim, legal promise, crisis statement or sensitive political/cultural meaning.

Section 3

Keep Human Judgment in Creator Decisions

Mandatory human decisions

  • Recruitment acceptance, rejection and terms
  • Diligence interpretation and exception approval
  • Creator-brand fit and conflict judgment
  • Service tier, resource allocation and exit
  • Performance review affecting opportunity or pay
  • Creator consent for scope, rights and likeness
  • Complaint, discipline and relationship repair
  • Safety, wellbeing and vulnerability response

Automation may assist

  • Collecting permitted public/account data
  • Duplicate and completeness checks
  • Summarizing sourced history
  • Flagging contract dates and conflicts
  • Generating candidate lists with stated criteria
  • Calculating standardized score components
  • Drafting review materials
  • Scheduling and reminder workflows
Do not infer sensitive traits, personal circumstances or creator intent from weak signals. A score should inform a named decision, never conceal who made it or why.

Section 4

Require Humans for Meaning, Voice, and Release

Creator / editor

Meaning and voice

Intent, cultural nuance, humor, translation, dignity, authenticity and fit with the creator's identity.

Brand / owner

Factual and commercial

Product facts, mandatory message, substantiated claims, offer details and authorized approvals.

Release owner

Publication control

Final version, disclosure, rights, sensitive context, correct account, timing and rollback readiness.

Always pre-review

  • Public-facing content with material brand/creator exposure
  • Claims about health, finance, safety or performance
  • Sensitive cultural, political or social context
  • Translation where ambiguity changes meaning
  • Synthetic depiction/voice or material AI alteration
  • Content involving minors or vulnerable people
  • Crisis, apology or corrective statement
  • Final publish package and account action

Review evidence

  • Current brief and exact asset version
  • Source footage, facts and product materials
  • Claim support and required disclosure
  • Rights/consent and usage scope
  • AI/tool provenance when material
  • Previous feedback and unresolved exceptions
  • Platform/account/destination
  • Deadline and response/rollback plan

Section 5

Route Claims, Rights, and Contracts to Qualified Humans

DecisionHuman authority requiredTools may support
Advertising claimBusiness owner plus qualified legal/compliance/category review according to riskExtract claims, link sources, compare approved language, flag missing support
Copyright / likenessRights owner or qualified reviewer confirms chain, scope, exceptions and permissionIdentify assets, metadata, license dates and potential conflicts
Usage / exclusivityAuthorized creator/agency/brand representatives accept exact media, term, territory and restrictionsCompare versions and calculate expiries
ContractAuthorized signatory acts on qualified legal/business adviceDraft from approved template, compare clauses and track issues
Regulated/sensitive contentAppropriate domain specialist and accountable release ownerRoute by category, highlight terms and assemble review packet
A generated summary or clause suggestion is not legal advice, verified permission, claim substantiation or contractual authority.

Section 6

Use Human Authorization for Money and Settlement

Mandatory approval

  • New or changed payee/bank instructions
  • Contract-to-ledger interpretation
  • Campaign reconciliation and exception treatment
  • Creator statement release
  • Tax/withholding position from qualified advice
  • FX route and high-value transfer
  • Refund, clawback, offset or disputed deduction
  • Payment batch and release

Dual-control triggers

  • Payee or bank-detail change
  • Payment above the written threshold
  • Manual override or unusual currency/route
  • New jurisdiction or incomplete documents
  • Related party or conflict of interest
  • Urgent request outside normal channel
  • Bulk statement/payment action
  • Privileged access or control configuration

Payment control

Verified obligation + reconciled amount + verified payee + authorized approver + execution evidence

Treat unexpected payment changes as potential fraud. Verify through a trusted independent channel; do not rely on the same message that requested the change.

Section 7

Keep Privileged Access and Sensitive Data Under Human Control

Human-controlled actions

  • Grant/revoke admin or creator-account access
  • Change recovery methods or ownership
  • Approve bulk data export
  • Change permissions and security policy
  • Delete or materially alter records
  • Respond to subject/privacy requests
  • Classify and disclose a security incident
  • Restore systems or rotate critical credentials

System safeguards

  • Named accounts and multi-factor authentication
  • Least privilege and role separation
  • Reauthentication for high-impact actions
  • Independent approval where required
  • Immutable or protected audit trail
  • Alerts for anomalous access/export
  • Joiner/mover/leaver reviews
  • Tested backup, restore and incident procedure

Section 8

Require Humans for Sensitive External Communication

AI can draft, translate and organize context. A responsible person must decide whether, when and how to send messages that affect trust, rights, money, reputation or safety.

Always approve before sending

  • Contract, pricing or payment commitment
  • Rejection, termination or disciplinary message
  • Complaint, dispute or allegation response
  • Crisis, apology or correction
  • Legal/regulatory or rights communication
  • Security/privacy incident notice
  • Sensitive creator performance feedback
  • Message impersonating creator or executive voice

Reviewer checks

  • Facts and recipient are correct
  • Sender has authority
  • Tone fits relationship and context
  • No unintended admission or commitment
  • Privacy and confidentiality protected
  • Translation preserves meaning
  • Required stakeholders consulted
  • Next action and evidence retained

Section 9

Put Humans in Charge of Incidents and Escalation

01

Triage

A trained owner validates the signal, protects people and assets, and assigns provisional severity.

02

Contain

Authorized responders restrict access, pause publication/payment or preserve evidence as appropriate.

03

Assess

Relevant specialists determine facts, exposure, obligations, stakeholders and response options.

04

Decide

Named incident authority chooses containment, communication, remediation and escalation.

05

Communicate

Authorized humans approve accurate, proportionate messages and timing.

06

Recover

Owners restore service, validate controls, close obligations and monitor recurrence.

07

Learn

Review causes, decisions, detection, response and system changes without erasing evidence.

Automation may detect, correlate, preserve and route incident signals. It should not independently make high-impact containment, disclosure or attribution decisions.

Section 10

Design a Real Human Review Gate

Reviewer packet

  • Decision requested and consequence
  • Exact item/version and source
  • Criteria, policy and applicable authority
  • Facts, assumptions and uncertainty
  • Tool/model/version and material provenance
  • Automated flags and known limitations
  • Prior decisions and open exceptions
  • Deadline, downstream action and rollback

Decision record

  • Approve, reject, revise or escalate
  • Reviewer identity and authority
  • Time and exact reviewed version
  • Reason and supporting evidence
  • Conditions or required correction
  • Conflicts/disclosures
  • Downstream release authorization
  • Expiry or re-review trigger

Competence

Knows the domain

Training and authority match the risk, jurisdiction, category and decision.

Independence

Can challenge

Reviewer is not forced to approve their own high-risk action or meet an overriding volume target.

Capacity

Has real time

Workload, interface and SLA permit meaningful review instead of habitual rubber-stamping.

Section 11

Use Sampling Only When Failure Is Detectable and Bounded

Sampling may fit

  • Process is stable and standardized
  • Individual failure is low consequence
  • Errors are measurable and discoverable
  • Population and versions are known
  • Sample is risk-weighted and periodically randomized
  • Thresholds force increased review or stop

Require 100% review

  • High consequence or irreversible output
  • New workflow, tool, model or content category
  • Known incident or elevated error rate
  • Novel/sensitive claims, rights or context
  • Payment, access or contractual authorization
  • Small population where each item is material

Adaptive review

Base sample + anomaly-triggered review + higher coverage after change/error + return only after evidence

Section 12

Govern AI as an Assistant, Not an Authority

Control pointRequired practice
PurposeDefine the bounded task, prohibited uses, expected user and risk level before deployment.
DataControl what may be entered, retained or exposed; protect confidential, personal and credential data.
GroundingRequire source links/evidence for factual work and verify against authoritative material.
ProvenanceRecord material AI use, model/tool/version where needed, prompt/context boundary and human edits.
EvaluationTest representative, edge, multilingual, adversarial and high-risk cases before and after change.
AuthorityPrevent the tool from approving its own output or executing consequential actions without the defined gate.
MonitoringTrack errors, overrides, drift, incidents and affected workflows; maintain stop/rollback capability.
OwnershipName a business owner, technical owner, risk owner and accountable human for each released decision.
Never treat generated citations, legal conclusions, account instructions, consent, identity, payee data or claim support as verified solely because the output looks complete.

Section 13

Measure Whether Human Review Is Working

Coverage

Required vs reviewed

By level/workflow

Escape

Errors after gate

Severity/cause

Detection

Issues found

Useful, not volume

Override

Human changes

Reason/outcome

Agreement

Reviewer consistency

Calibration

Latency

Review cycle

Risk-adjusted SLA

Load

Queue / capacity

Rubber-stamp risk

Control

Bypass / failure

Incidents and recovery

Weekly exceptions

Review bypasses, overdue high-risk gates, post-release errors, anomalous overrides and reviewer-capacity risks.

Monthly calibration

Use blinded real examples to align criteria, evidence, escalation and decision quality across reviewers.

Change review

Reassess levels and tests after a new tool/model, jurisdiction, category, incident or material workflow change.

Section 14

Install Human-Control Gates in 30 Days

Week 1

Inventory decisions

  • Map automated and human decisions
  • Identify consequence, authority and irreversibility
  • Find silent releases and self-approvals
  • Assign provisional review levels

Week 2

Design gates

  • Name reviewer roles and backups
  • Define packets, criteria and records
  • Set dual control and escalation thresholds
  • Prevent downstream execution before approval

Week 3

Pilot and calibrate

  • Run representative and edge cases
  • Measure latency, agreement and escapes
  • Test rejection, outage and rollback
  • Train reviewers with real examples

Week 4

Operate and improve

  • Launch exception dashboard
  • Publish ownership and bypass policy
  • Introduce risk-based sampling where safe
  • Schedule monthly and change-triggered review

Section 15

Common Human-Review Failures

Human in the loop means clicking approve

A reviewer needs authority, competence, time, evidence and the ability to reject or change the outcome.

Every output gets full review

Uniform review overloads experts and creates rubber-stamping. Tier work by consequence and uncertainty.

Only AI output is reviewed

Human-created work can also fail. Control the risk and decision, not the tool label.

Review happens after publication

Post-release monitoring matters, but it cannot replace pre-release approval for irreversible exposure.

The reviewer sees only the draft

Provide source, brief, rights, claims, history, tool provenance and relevant exceptions.

Automation can override the reviewer

The approved version and decision must bind downstream execution; changes require a new gate.

No record means faster operations

Material decisions need proportionate evidence for handoffs, disputes, learning and accountability.

AI confidence sets authority

Fluent output and model confidence are not verified facts, legal authority or professional competence.

Section 16

Human-Control Readiness Checklist

Classification

  • Consequential decisions are inventoried
  • Review level follows risk and authority
  • Context changes can raise the level
  • Sampling is limited to bounded detectable error

Reviewer

  • Named person has competence and authority
  • Independence/conflicts are addressed
  • Time and interface support meaningful review
  • Backup and specialist escalation exist

Gate

  • Exact version and evidence packet are clear
  • Reviewer can reject, revise and stop
  • Decision, reason and identity are recorded
  • Approved result binds downstream execution

Governance

  • AI use/data/provenance are controlled
  • Bypass, escapes, overrides and latency are monitored
  • New tools/risks trigger re-evaluation
  • Rollback and incident ownership are tested
SAIKO HUMAN-CONTROL RULE

Automate preparation and repetition; keep accountable humans at decisions involving consequence, authority, uncertainty, or dignity.

A real human gate combines a competent reviewer, sufficient evidence, authority to stop, an auditable decision, and downstream enforcement proportional to the risk.

Human review is not a pause button in the workflow. It is where responsibility enters the system.
SAIKO Agency Operations Playbook • MCN Guide #58
Ready to scale your creator strategy in China?
Explore All MCN Guides →