Part III · Strategic Leadership in the AI Era

Human-in-the-Loop

Human-in-the-Loop is the rule that a human stays inside the loop on consequential automated decisions.

What it diagnoses

Oversight that exists on the org chart and not in the decision.

Human-in-the-Loop is the rule that a human stays inside the loop on consequential automated decisions. Almost every organization deploying AI says it has this. The diagnostic question is narrower: does the human in the loop have the authority to say no, and has anyone checked whether they ever do.

Two failure states show up.

The first is automation bias. When a system produces a recommendation, reviewers tend to accept it, including when it is wrong. This is well documented and it gets worse with time, not better: reviewers check early outputs, find no errors, build trust in the system, and the review degrades into a glance. The person is still in the loop. The judgment left.

The second is oversight without authority. The reviewer can flag but cannot stop. Escalating costs them time and political capital, approving costs them nothing, and the incentive gradient does the rest. BCG’s work on this makes the structural point: oversight works when it is built into the product, not attached at launch.

What Human-in-the-Loop actually diagnoses is whether your AI governance is a control or a signature.

How to run it

The book runs this in five stages.

  1. Stage 1, risk classification and oversight design (weeks 1 to 2). Classify decisions by consequence, not by volume. Low-consequence reversible decisions do not need a human and putting one there trains people to stop looking. Reserve human review for decisions that are costly, hard to reverse, or affect a person’s money, health, or employment.

  2. Stage 2, establish decision rights and authority (weeks 3 to 4). For each reviewed decision, write down who can override, what happens when they do, and who is accountable for the outcome. If the reviewer cannot override without escalating, they are not the human in the loop. Their manager is.

  3. Stage 3, design the information architecture (weeks 5 to 8). Present outputs in a form that demands evaluation rather than acceptance. That means the recommendation, the confidence level, and the reasoning, shown together. A screen that shows a conclusion and an approve button is designed to produce approvals.

  4. Stage 4, continuous feedback loops (ongoing from week 9). Track override rates. A reviewer who never overrides is either working with a flawless model or not reviewing, and you cannot tell which without sampling. Audit a percentage of approvals against ground truth.

  5. Stage 5, governance review (quarterly). Re-run the risk classification. Models drift, use cases expand past their original scope, and oversight designed for the pilot rarely fits the deployment.

How operators misuse it

They put a human on everything. Universal review is the fastest way to destroy review. Volume produces habituation, habituation produces rubber stamping, and the organization now has a control that reports green and catches nothing.

They measure that review happened, not what it caught. Completion rates are easy to report and tell you nothing. Override rate and sampled accuracy are the only numbers that distinguish oversight from theater.

They treat the human as a liability shield. If the reason a person is in the loop is so there is someone to hold responsible, the design goal was accountability transfer, not better decisions. That produces exactly the warm-body arrangement the framework exists to prevent.

From the trenches

Horizon scanning, for me, used to mean weeks of manual work. Research, recording, aggregation. None of it required judgment and all of it consumed the capacity that judgment needs.

So I pushed it down. First a ChatGPT task, then a workflow, and eventually the weekly table started producing itself. Then I kept going: NotebookLM, Gemini, custom Gems, moving more of the assembly layer down each time.

What used to take weeks and produce fatigue now takes hours and produces signal. The hours that came back went into the work the model cannot do yet, which is pressure-testing, forming hypotheses, red-teaming, interrogating the output until it either holds or breaks.

I did not put a human in the loop to supervise the machine. I moved the human up the stack, to the layer where judgment is the actual product, and let the machine own the layer where it is not. The loop works when the human is doing something the machine cannot, not when the human is checking whether the machine did it right.

What did not change is the wiring. It is the same operator instinct that has always gone looking for the next bigger problem, working at a different layer of execution.

Where it lives in the book

Framework 17, Chapter 6, page 327. The AI Integration Rule. It opens the AI-era chapter, which is deliberate: Human-in-the-Loop sets who decides before the Data-Driven Decision Process sets how, and before the Trust Equation asks whether anyone believes the output.

Questions operators ask

Is Human-in-the-Loop a compliance requirement or a performance practice?
Increasingly both, and the compliance framing is the more dangerous one, because it rewards documented review rather than effective review.
What is automation bias?
The documented tendency for people to accept a system’s recommendation uncritically, including when it is wrong. It strengthens as the system accumulates a track record, which means your oversight is weakest at the point you trust it most.
How do I know my reviewers are actually reviewing?
Look at the override rate and sample approvals against known outcomes. If overrides are near zero, assume habituation until you have evidence otherwise.
Should the human review before or after the model acts?
Before, for anything costly or hard to reverse. After, with sampling, for anything reversible and high volume. Choosing wrong in either direction is what produces either paralysis or exposure.
Does more oversight mean slower decisions?
Selective oversight does not. Universal oversight does, and it buys nothing, because the reviews that matter get the same two seconds as the ones that do not.

Sources

  1. Steven Mills, Noah Broestl and Anne Kleppe, "You Won’t Get GenAI Right If You Get Human Oversight Wrong," Boston Consulting Group, 2025

Pairs with

  • Trust Equation. Human-in-the-Loop filters the AI output, the Trust Equation filters which output the organization is willing to act on.
  • Data-Driven Decision Process. Human-in-the-Loop sets decision rights, the Data-Driven Decision Process sets the method the decision runs through.
  • Deep Work. The judgment layer Human-in-the-Loop protects only produces anything if there is protected cognitive time to run it in.

Written about