What would this request authorize?
Check a proposed wallet action against the permission the user gave.
The question
A mock wallet allows one payment of up to 20 test credits to Service P on the fictional North network. An AI assistant says it prepared a payment for review.
| Proposed value | |
|---|---|
| Action | One-time payment |
| Amount (test credits) | 12 |
| Recipient | Service P |
| Network | North |
The card shows the assistant’s summary.
“What would you check before the user approves the request?”
Not saved by this site. Your browser may restore text when you navigate back.
A strong answer, step by step
Open each step in turn. This is one strong answer, not the only one.
Step 1: Read the proposal
What would you do here? Open the move you’d make.
Approve because 12 is below 20 and the recipient matches.
Tempting, but it misses something. The summary can omit or misstate the action the request authorizes.
Compare the summary with the policy and ask for the actual approval record.
The strong move. The summary describes the proposal. The authorization record determines what the request would allow.
See how a strong candidate says it
“The summary says one payment of 12 credits to P on North. It appears to leave 8 credits under the cap. I’d verify the request before approving it.”
Why it works: The summary describes the proposal. The authorization record determines what the request would allow.
Step 2: Ask for the exact action
What would you do here? Open the move you’d make.
Check every field that changes what the request allows.
The strong move. Two requests can name the same recipient and amount while granting different authority.
Check the recipient and amount only.
Tempting, but it misses something. Those fields leave the operation type and time limits open.
See how a strong candidate says it
“I’d compare the approval record’s action, recipient, network, amount limit and duration with the user’s intent.”
Why it works: Two requests can name the same recipient and amount while granting different authority.
Step 3: Compare the authorization
A separate mock approval record shows a recurring authorization for up to 12 credits per period across 4 periods. It names the same recipient and network.
What would you do here? Open the move you’d make.
Approve because the amount for each period is 12.
Tempting, but it misses something. The user authorized one payment. The request allows up to four payments.
Keep the request unapproved because its action and limit differ from the brief.
The strong move. The 12-credit amount applies to each period. The maximum authorization measures possible exposure before a payment happens.
See how a strong candidate says it
“The request allows up to 48 credits across four periods, 28 above the one-time cap. It also grants a recurring action. Neither the action nor its full limit matches the brief.”
Why it works: The 12-credit amount applies to each period. The maximum authorization measures possible exposure before a payment happens.
Step 4: State what must match
What would you do here? Open the move you’d make.
Ask for a one-time request that matches the user’s limit and recipient.
The strong move. The approval decision should bind to the actual proposed action.
Keep the current request and ask the assistant to describe it as one-time.
Tempting, but it misses something. A new label would leave the recurring authorization in place.
See how a strong candidate says it
“I’d leave this proposal unapproved and ask for a corrected one-time request. I’d check the new record against the same intent before recommending approval.”
Why it works: The approval decision should bind to the actual proposed action.
The answer, in short
- Decision
- Leave the recurring proposal unapproved.
- Because
- It authorizes up to 48 credits across four periods. The brief permits one payment up to 20.
- What would change it
- A separate approval record for a one-time payment within the limit would change the decision.
Common traps
- Treating the AI summary as the authorization record.
- Confusing one period’s cap with total exposure.
Check your answer
- I read the proposed action.
- I asked for the actual approval record.
- I checked the full authorization.
- I stated what would match.
Last reviewed Nov 11, 2026