Approval gate
An approval gate holds an automated action until a named person approves it. A good gate is set by risk, can be overridden per action, and records who approved. A page that only says a human stays in the loop has not described a gate.
Definition
Gates work best by tier: a low-risk block runs on its own, a host isolation asks, a domain controller action never runs without two people. Tiers need to be changeable by action and by integration.
Check where the approval is requested, how long it waits and what happens on timeout. A gate that times out into execution is not a gate.
Approval gate in Google Security Operations's documentation
Google's Response Agent documentation says manual approval is the default, autonomous thresholds can be set at Low, Medium or High risk, and each integration or action can be overridden to Autonomous, Default or Manual Approval. vendor claim docs.cloud.google.com, read
The example names a vendor and its own page. A vendor's use of Approval gate may differ from the definition above; the rubric uses the definition on this page.