Human-in-the-loop workflows with external input and approvals

**What the feature is (as Title)**

Human-in-the-loop workflows with external input and approvals

**Value proposition**

The biggest blocker to automating consequential actions is trust. When a workflow reaches a decision that needs a person, such as an approval or a piece of input, it pauses and waits, and that request can be delivered to external tools like Slack. Responders act from where they already work instead of needing a Kibana session, which makes approvals fast enough to be practical. Automation handles the routine work while people stay in control of the moments that matter.

**Expected outcome**

- Workflows can pause mid-run and wait for human input or approval
- Requests for input can be delivered to external tools, with responses resuming the workflow
- Approval decisions are captured for audit

**Optional: Key user stories / use cases**

- Requiring an analyst's approval before a workflow isolates a host
- Collecting a missing parameter from a responder mid-run