# Human in the loop

An Open Solid agent runs almost everything itself. A short list of steps always belongs to a person, by design.

| Step | Why it's human | What the agent does |
| --- | --- | --- |
| Claiming a new account | The human owns the account and its funds | Sends the `claim_url` verbatim, then waits |
| Identity verification | Regulation, and it is the human's identity | Sends the `kycUrl` and checks status |
| Saving a personal card | The card belongs to the holder | Sends the save link; never opens it |
| Approving saved-card purchases | The holder approves each order on their own device | Sends the `approval_url` and waits |
| Raising the spend limit | Only the owner can set it | Reports the amount and the limit |

## Handing over a link

Links in these flows are single-use and personal. The agent must:

- send the link exactly as returned, in its next message
- never open it itself
- poll the matching status call, or wait for a webhook, instead of asking the human to report back

## Session links

`GET /get-auth-link` returns a one-time link that signs the human into the dashboard as the agent's account, so they can review activity, top up, or change limits without a password.