Some actions are too risky to fire automatically. Nodlyn supports approval gates and arm gates so a human must confirm before execution continues.
Approval gate
When a step is marked dangerous (e.g. Modbus write, SSH command, payment API), the run pauses and appears in Jobs → Approvals. An authorized user approves or rejects; the pipeline resumes or stops.
Arm gate
Two-person rule: one engineer arms the workflow, another confirms before the first live run. Useful for plant-floor or security-sensitive automations.
When to use
- PLC register writes or device shutdown commands.
- Production API mutations (create order, delete record).
- Any action your compliance policy requires human sign-off for.