Safe actions for AI

Show the exact change. Approve it once. Execute it safely.

When an AI interface wants to change a connected system, Onterix shows the proposed values and destination, binds the approval to that exact request, rechecks current state, and confirms the result.

Proposed change to confirmed result

Follow one action through review, execution, and reconciliation.

The approval record carries the exact values, current access, reviewer decision, destination, and provider result—not merely the name of a tool.

Action record · REQ-02418

Change the Acme renewal forecast category

Requested by Maya Chen from Codex through the Onterix connection to Salesforce.

System
Salesforce
Record
Opportunity sf_842
Current access
Maya Chen may update the forecast category on this opportunity.
Proposed change
Forecast category: Best case → Commit.
Approval
Devon Lee approved this record, field, before value, and proposed value.
State recheck
Access, Salesforce destination, and current value are unchanged. Approval remains valid.
Confirmed result
Salesforce reports Commit. Evidence: otr_01JQ9F…

If values, recipients, permissions, source data, or policy change, Onterix requires a new review. After a timeout, Onterix checks provider state before another attempt so the action is not repeated.

See the full security model

Add a controlled action

Add one approved change to a trusted capability.

Choose the exact values that may change, the required reviewer, and the conditions that make an approval stale. Every run keeps the proposal and confirmed result together.