# Approvals

An AI can write code and ask to <Term id="deploy">deploy</Term> it, but it never puts an app live by itself. The deploy waits, and nothing builds until a person approves it. A person stays in charge of what visitors see and what the app costs.

<Callout type="info" title="An AI never deploys by itself">
  This applies to every AI tool in a [Studio](/docs/ai-harness) and to every [agent](/docs/agents).
</Callout>

## When a deploy needs approval [#when-a-deploy-needs-approval]

A deploy waits when it was asked for by:

- **Your AI tool** in a Studio (for example, after you press **Deploy** on a project without a linked repository, or ask your AI to deploy).
- **A teammate's AI tool**.
- **This project's agent**.
- **A push from a Studio to the production branch** of the linked repository.

A deploy you start in the app, or a push from outside a Studio, does not wait.

## Before you start [#before-you-start]

- You need to be able to change the <Term id="project">project</Term>.
- You approve with your own sign-in in the app. An <Term id="api-key">API key</Term>, a Studio or an AI cannot approve or reject a deploy.

## Approve or reject a deploy [#approve-or-reject-a-deploy]

<Steps>
<Step>
### Open the project's Deploy page [#open-the-projects-deploy-page]
Go to <AppLink to="deploy" /> and open the project, or use the project's **Deploy** tab. A notice reads **A deploy is waiting for you** (or how many are waiting), with "An AI asked to put this project live. Nothing builds until you approve."
</Step>
<Step>
### Check what would go live [#check-what-would-go-live]
Each request shows who asked, the **Commit** it would build (with **Branch of** the repository when there is one), the files **In the commit**, and **Waits until** a time. The commit is fixed when the AI asks, so later Studio changes cannot slip in.
</Step>
<Step>
### Decide [#decide]
Select **Approve and deploy** to build now, or **Reject** to drop the request. An approved deploy appears under **Deployments**, credited to you.
</Step>
</Steps>

<Screenshot src="/docs/_media/deploy-page-overview.png" alt="A deploy waiting for approval on the project's Deploy page" />

## What you see when it worked [#what-you-see-when-it-worked]

After **Approve and deploy**, the button shows **Starting**, the notice goes away and the deploy moves through **Queued**, **Building** and **Live** under **Deployments**. After **Reject**, the notice goes away and nothing builds.

## How long a request waits [#how-long-a-request-waits]

<Callout type="warn" title="Requests close after 30 minutes">
  An unanswered request closes on its own and nothing builds.
</Callout>

To still deploy, ask the AI to request it again.

Your plan limits how many requests can wait at once; beyond that, new ones are refused until the waiting ones are answered.

## From code [#from-code]

<ForDevelopers>

From a Studio, `deploy` raises `AwaitingApprovalError` with the request's `approval_id`. Tell the person and wait; calling it again does not help, and approving from code is refused.

```python
from klarety import Nexus
from klarety.errors import AwaitingApprovalError

nx = Nexus.connect()
try:
    nx.projects.deploy("PROJECT_ID")
except AwaitingApprovalError as waiting:
    print(waiting)

for request in nx.projects.deploy_approvals("PROJECT_ID"):
    print(request)
```

`deploy_approvals` lists the requests that still wait for a person.

</ForDevelopers>

<ForEveryone>

There is nothing to do from code: a person always decides in the app.

</ForEveryone>

## If something goes wrong [#if-something-goes-wrong]

- **"this deploy was already decided, or it waited too long"**: someone else answered it, or the 30 minutes passed. Ask the AI to request it again.
- **You do not see Approve and deploy**: you cannot change this project. Ask its owner or an admin.
- **The AI says too many deploys are waiting**: approve or reject the waiting requests on the Deploy page first.

## Where to go next [#where-to-go-next]

- [Deploy an app](/docs/deploy/deploy-an-app)
- [Run settings and app keys](/docs/deploy/run-settings)
- [Runs and approvals for agents](/docs/agents/runs)