Human in the loop
The system proposes; a person decides. The loop cannot close without them.
- A required yes per action
- Safest for irreversible acts
- Throughput set by people
- Risk: rubber-stamping
In the loop, nothing happens until a person says yes. On the loop, the system acts and a person watches with a hand on the stop. Out of the loop, it acts alone.
This guide traces the three positions to their source in weapons policy and human-factors research, lays out the ten levels of automation between “human does everything” and “machine ignores the human”, shows how one AI agent can sit at different levels for different functions, and gives a way to place people by risk, reversibility and measured accuracy.
Updated · 6 sources
Human in the loop means the system cannot complete an action until a person approves it — the person is a required step. Human on the loop means the system acts on its own within set limits while a person supervises and can intervene or halt it. Human out of the loop means the system acts with no human involvement once started. In human in the loop vs human on the loop, the difference is whether a person must say yes before the action, or can say stop during or after it.
The three terms describe where a person stands relative to an automated decision: inside it, above it, or absent from it.
The system proposes; a person decides. The loop cannot close without them.
The system decides and acts within limits; a person monitors and can intervene, override or stop.
Human out of the loop. Once started, the system selects and acts with no person involved — level 10 on the scale. Oversight moves to design, testing, limits set in advance and after-the-fact audit. Tying in, on and out to levels 5, 6 and 10 is a common reading of the scale; the original papers do not use the loop terms.
The vocabulary was not invented for AI. It grew out of decades of research on supervisory control, and was made concrete by policy on autonomy in weapon systems.
Parasuraman, Sheridan and Wickens’s key point: “how autonomous is it?” has no single answer. A system can gather information at a high level of automation and still leave the decision to a person.
Design at the function, not the system. Labelling a whole agent “human in the loop” hides where the person actually is. State the level for each function, and you can see exactly which decisions people own.
Two properties of an action decide most cases: how much harm a wrong action does, and whether it can be undone. Measured accuracy then decides how far along the spectrum you can move.
Has the accuracy for this decision been measured on your own data?
Putting a person somewhere in the loop is easy. Making their judgment count is not. Bainbridge’s ironies and the EU AI Act’s Article 14 point at the same failure modes.
limits are tightened or relaxed by the evidence
On Botminds each position is a setting you choose per tool, per stage and per field — and the evidence to move a field along the spectrum is collected as people work.
Read the full design in human in the loop, and the Academy lesson on human in the loop.
In human in the loop vs human on the loop, the first requires a person’s approval before the system acts; the second lets the system act within limits while a person monitors and can intervene or halt it.
The system acts with no human involvement once it is started. Oversight moves entirely to design, testing and after-the-fact audit.
The best-known scale, from Sheridan and Verplank (1978) as restated by Parasuraman, Sheridan and Wickens (2000), has ten levels: from the computer offering no assistance, through executing a suggestion only if the human approves (level 5) or unless the human vetoes in time (level 6), to the computer deciding everything and ignoring the human (level 10). The 2000 paper adds that each function — acquiring information, analysing it, deciding, acting — can sit at its own level.
Article 14 requires effective human oversight for high-risk AI systems: people must be able to understand the system, stay aware of automation bias, override or reverse its output and interrupt it. It does not mandate one position for every decision; how it applies depends on the system.
The tendency to over-rely on automated output — accepting it without checking. It is why oversight designs hide scores on audit samples and show reviewers the source evidence.
When actions are low-impact and easy to undo, and accuracy has been measured on your own data. Even then, sample results and keep a way to stop it.
Bring one process and its documents. We’ll show you the agents, the controls and the record, running on your data.