{
 "schema_version": 1,
 "generated": "2026-10-23",
 "id": "decionis-docker--hold-production-deploys-for-human-approval",
 "repo": "decionis/docker",
 "repo_url": "https://github.com/decionis/docker",
 "repo_slug": "decionis-docker",
 "title": "Hold production deploys until a human approves",
 "page_title": "How to hold production deploys until a human approves with Docker",
 "summary": "Route an agent's production deployment through policy so a HOLD waits for verified Presence approval.",
 "who": "Platform engineer whose AI coding agent sometimes proposes production infrastructure changes.",
 "problem": "An agent can run terraform apply or similar commands in production with no check on whether a human should have signed off.",
 "outcome": "Production changes run only after policy returns PROCEED, with a human approval recorded for any HOLD.",
 "steps": [
  "Define a policy that marks production infrastructure changes as requiring human authority.",
  "Connect the agent's deployment tool calls so each proposed action is sent to Decionis before execution.",
  "When Decionis returns HOLD, have the authorized approver complete Presence verification such as a passkey or trusted-device approval.",
  "Confirm the verdict changes to PROCEED before the downstream system runs the change.",
  "Keep the resulting Decision Dossier for the deployment record."
 ],
 "agent_prompt": "Using the decionis/docker repository, send a proposed action named terraform.apply with environment production for <target stack> to Decionis before running it. Expected output: a verdict of PROCEED, HOLD, or BLOCK with a policy name and reason codes. Verify that execution does not start unless the verdict is PROCEED after any Presence approval.",
 "agents": [
  "any"
 ],
 "difficulty": "Advanced",
 "time": "2 hours",
 "basis": "readme",
 "caveat": "The README says Decionis does not execute the action, so your downstream system must still wait for a PROCEED verdict before it runs the change.",
 "category": "Software and DevOps",
 "tags": [
  "Software and DevOps"
 ],
 "lang": "go",
 "requirements": [
  "A Docker environment, such as Docker Desktop, where you can run the Decionis components",
  "An AI agent or MCP client that can send proposed actions to Decionis before running a tool",
  "A written policy for which actions need PROCEED, HOLD, or BLOCK, since Decionis evaluates against versioned policy",
  "Awareness that the README says components are released incrementally, so some listed features may not be available yet"
 ],
 "risk": "none",
 "seen_in_the_wild": false,
 "mentioned_publicly": false,
 "risks": [],
 "best": true,
 "score": 1.0,
 "evidence": [],
 "url": "https://dedupedai.com/use-cases/decionis-docker/hold-production-deploys-for-human-approval/",
 "md": "https://dedupedai.com/use-cases/decionis-docker/hold-production-deploys-for-human-approval/index.md",
 "disclaimer": "Deduped lists open-source repositories that belong to other people. We do not own, maintain, audit, or vouch for any of them, and a repo appearing here is not an endorsement or a safety check. The use cases, steps, and prompts are written by AI and may be incomplete, outdated, or just wrong. Where a use case is marked \"Seen in the wild\", we link to public posts where someone described something similar, but we have not verified those posts and the use case itself is still our AI's own write-up. Use all of this at your own risk. Only run code, commands, or agents on systems and accounts you are authorized to use, and read the code and every command before you run it, especially anything that touches credentials, files, or the network. Nothing here is professional, security, legal, or financial advice. All trademarks and project names belong to their respective owners, and their use here does not imply affiliation. Content is provided as is, without warranties of any kind. Found a mistake, a safety problem, or something you want removed? Email hello@dedupedai.com and we will look at it promptly.",
 "api": "https://dedupedai.com/api/v1/usecases/decionis-docker--hold-production-deploys-for-human-approval.json",
 "api_version": "v1"
}