Solutions / 03
High-trust actions
Introduce proportional checks when an interaction carries real-world consequences.
The problem
The fact that a request comes from an authenticated session does not always establish whether a person is actively participating.
The proposed approach
Ask for renewed human participation where the risk justifies it, and tie the result to an explicit operation and short validity window.
The aim
A product pattern for intentional confirmation rather than continuous intrusive monitoring.
Five considerations
- Describe the consequence of the action.
- Match assurance to the risk.
- Bind the result to the intended operation.
- Expire results and reject replay.
- Maintain a recovery and support path.