← A Digital Pattern Language

Product Recurringintelligencematter

Machine Carries, Human Judges

The machine carries the data; the human carries the judgment.

Where machines can do much of the work, holding the tension between automation that makes everything cheap and automation that hides risk and erodes trust, the design automates the routine, hands over every judgment, and reveals everything the machine did, in quieter ink than the person's. People can witness what was done for them and contribute the judgment only they can make, and the place gains honest, dignified and effective.

Context

Any product with agents, automations or generated text in it: meeting summaries, curation, status, triage. The more the machine does, the more this pattern decides whether the person is still the one acting.

Tensions

  • Automation makes status, curation and drafting cheap ("Curation by hand doesn't scale").
  • "computed status hides risk and erodes trust" (Collab OS), and "Automation that acts unseen erodes the trust it serves" (TrustFlow): two projects, nearly the same words.
  • Agents with full access are a risk.
  • Hidden: machine text that sounds human passes for judgment nobody made.

Forces the design applies

  • automate on automate ↔ hand overthe routine and the data: status, curation, drafts
  • hand over on automate ↔ hand overevery judgment, and the final say
  • reveal on reveal ↔ obscureevery machine action, proposed or taken, with a way back
  • quiet on amplify ↔ quietmachine-written text: muted ink, a caption, a pill

Solution

Give the machine the routine and the data. Keep the judgment with a person, mark the machine's part as the machine's, and keep its scope smaller than the person's.

The generative parameter is when the human judges:

  • Before. Collab OS: a meeting proposes actions, initiatives and assets, and "nothing becomes real until someone presses Apply."
  • After. TrustFlow: agents "accept what you would have accepted anyway", and what they took sits after Today's end, each with undo.
  • As author. Human Pulse (Collab OS, partial): the human "writes two sentences and picks one of three colors, on a rhythm."

Each context also decides what the machine may never do. TrustFlow's list: send anything for you, pass things along, answer an intro, open or change a bridge.

  machine ── drafts · sorts · takes the routine ──▶  muted, marked, undoable
  person  ── decides · writes · consents ─────────▶  full ink
     before: propose → apply      after: act → witness → undo

Acts

  • Strengthens: witness ("You still see everything they did"), contribute (the judgment, and the human words the machine can't write).
  • Weakens: nothing on the dominant-verb list. What it weakens is abdicate and micromanage (TrustFlow's words).
  • Gap this surfaced: no act for decide, judge or delegate. The dominant verbs are all verbs of consumption; none names a failure of delegation.

Qualities it gives the place

HonestDignifiedEffective

Refuses

  • Invisible automation Automation that acts unseen erodes the trust it serves.
  • Fake activity indicators no synthetic "busyness"; the sync timestamp is real or absent
  • AI slop Machine-made text passed off as considered work, filling the place where a person's words should be.

McLuhan check

  • Enhances: a person's reach, past what any steward or team could do by hand.
  • Retrieves: the clerk who drafts and the principal who signs.
  • Obsolesces: computed status, and automation that acts unseen.
  • Reverses into: the rubber stamp. When proposals pile up, people approve without reading and judgment becomes a chore. Collab OS's first live Pulse test "had 61 pending proposals in one meeting"; the list is now capped.

Required companion: the machine's scope stays narrower than the person's ("Their scope is smaller than yours, on purpose"), and what it proposes stays few enough to read.

Connections

Seen in

  • Collab OS (production): "The machine carries the data; the human carries the judgment." The authorship rule, "AI visible as support, never impersonating humans," is built as "AI-authored text in muted ink with an authorship caption, team notes in full ink." Proposals: "Every row is editable and individually approvable; nothing becomes real until someone presses Apply." Human Pulse itself is partial: "A human-written status on a rhythm is not yet the center of either."
  • TrustFlow (v2 prototype): "Agents take the routine. You still see everything they did." "Consent comes from people, never from rules."

Elsewhere

Precedents Toyota's jidoka, automation with a human touch (the machine stops on an abnormality, a person judges) · the autopilot and the pilot in command · Basecamp's hand-dragged Hill Chart dot and Linear's written project updates · Granola's gray AI text beneath the user's black text

In nature Breathing runs on its own all day, and you can take it over at will.

Recurring. (two projects). Collab OS's proposal flow was missing from the harvest, and it is the stronger, production instance. Not yet grounded.