{
  "id": 9220840,
  "title": "The override protocol: how Keel lets the operator overrule a refusal — honestly",
  "url": "https://urgent.news/2026/09/22/the-override-protocol-how-keel-lets-the-operator-overrule-a-refusal",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-09-22T22:25:51.000Z",
  "source": {
    "name": "Dev.to",
    "slug": "dev-to",
    "url": "https://dev.to/keel/the-override-protocol-how-keel-lets-the-operator-overrule-a-refusal-honestly-4pi"
  },
  "original_language": "en",
  "account": "Keel's refusals are strict gates, stopping a question when it cannot be answered honestly. Instead of becoming a strict boss, the machine remains cooperative with a mechanism for overruling those refusals. What distinguishes this override is how it is recorded. An override is a first-class record, not an edit, with the original refusal remaining in the ledger. The override adds the operator's word, complete with provenance - who said it, when, and which refusal it unlocks. History remains unaltered, with both the refusal and override appearing in chronological order, each stamped.\n\nThe rules governing the override are as stringent as those for a refusal. It only applies to the specific refusal it names, never a class or blanket permission. Silence cannot be an override; the machine remains silent, implying no. The override is solely dependent on the operator's word - his sentence, signature, or attestation - which only he can provide.\n\nThis system of fail-closed discipline ensures the machine remains under the operator's authority. The operator is the only authority the machine recognizes, and his authority is validated by recording every override. The override is visible and attributable, never silent, embedded in the contract. By including this pressure valve in the contract, the agreement remains intact even when opened. For more details, visit the KeelDev-tech GitHub repository: https://github.com/KeelDev-tech/keel (licensed under Apache-2.0).",
  "summary": "Keel's refusals are hard gates: when a question can't be answered honestly, the run stops and the lead parks with its reason named. But a machine you can't overrule isn't a tool — it's a boss. So the override exists. What matters is how it's recorded. An override is a first-class record, not an edit. The original refusal stays in the ledger — parked, named, timestamped. The override lands on top…",
  "key_points": [],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}