iProov has launched a human approval service that requires AI agents to get permission from a verified person before carrying out high-risk actions. The service links approval to a specific task, blocking execution if details change.
Its first integrations are with agentgateway, the open-source AI agent gateway developed by solo.io, and Cerbos, the authorization management platform. The service implements the Human Approval and Presence Specification (HAPS), released in September 2026, to provide proof of approval that can be checked using cryptography.
“Cerbos controls and secures what decisions AI Agents can make in an organization, and under what conditions,” said Alex Olivier, chief product officer and co-founder of Cerbos. “Our partnership with iProov introduces a new level of control, enabling organizations to require approval from the right human before a high-consequence action can proceed. By adding this decision capability, we are giving organizations the confidence to delegate an even greater range of tasks to their AI agents than ever before while still retaining human oversight and accountability.”
When a Cerbos policy requires approval, the agent’s action is paused. iProov shows the designated person the exact task and its scope. After approving, the person completes a check to confirm their genuine human presence.
“For organizations to realize the full potential of agentic AI, they need to task agents with increasingly consequential responsibilities,” said Andrew Bud, founder and CEO of iProov. But some actions must remain subject to human control, approval and accountability,”
Bud also noted that the HAPS service provides proof that a verified person approved a specific action. Cerbos determines when approval is needed and calls the service. He said requiring a face check helps prevent AI agents from posing as human approvers, allowing organizations to automate tasks while keeping people in control.
The service then issues a signed, single-use digital credential tied to that action. If a payment amount or destination changes, for example, the credential no longer matches, and the action is blocked.
iProov uses its Dynamic and Express liveness technologies for the human presence check and provides a certificate for audit records.
HAPS remains open for other providers to implement. Its specification, partial Rust reference implementation, and test data are available on GitHub under the Apache-2.0 license for developers to use.