Help and guides
Review changes
Find the pending decision and approve only the change you intend to make.
Before you start
You need the role required for the decision. Check the organization, resource, destination, and any cost before approving.
Steps
- For purchases, open the organization purchase area and choose Review purchase requests.
- For a site release, open the site and use Review live release when available.
- For DNS, review the proposed action in the domain DNS view. For Compute, check Needs attention.
- Read the exact proposed change before approving or rejecting it.
- Return to the resource to check whether the approved work completed.
What to expect
The decision is recorded for the reviewed change. Approval does not guarantee that deployment or provider work has finished.
If something goes wrong
If the change or destination has changed since you reviewed it, read the new proposal. Do not repeatedly submit an uncertain operation or approve a different change just to clear a warning.
Technical reference
Separate intent, decision, and execution
- A customer or agent reads current state and submits one exact proposal.
- Thora records the requester, target, operation, expected state, version or revision, expiry, and digest.
- For approval-gated actions, a signed-in direct organization administrator reviews the exact proposal in the header notifications menu.
- The decision path revalidates membership, capability, target state, and proposal digest.
- Execution claims one durable receipt before the provider call.
- The customer reads the receipt and resulting resource state.
Do not collapse the boundary
- A developer token cannot call the browser decision route.
- A write scope does not contain approval authority. An organization-admin DNS write credential can execute record changes on an already hosted zone directly.
- An agent's statement that the user approved is not a dashboard decision.
- An approval for one digest cannot approve a newer build, changed record, different resource, or expired proposal.
- Operator execution cannot be reclassified as customer acceptance.
Handle uncertain outcomes
When a provider may have accepted work but Thora lacks a definitive result, the operation is fenced as uncertain. Do not create a replacement request to make the interface look complete.
- Stop automated follow-on work.
- Read the proposal, receipt, and resource again.
- Reuse the original idempotency key only if the documented endpoint permits a retry.
- Escalate to reconciliation when the response says operator review or recovery is required.
- Resume only after the control plane records a reconciled state.
