Agentic Travel Authorization, Mandates and Human-in-the-Loop

The critical question in agentic travel is not "what can the agent do?" but what side effect did the user authorize, under which limits?

Authorization layers

Separate user intent, selection approval, purchase mandate, payment authorization, booking authorization and servicing authorization.

Mandate model

A mandate should carry subject, operation scope, product/offer scope, amount/currency limits, merchant/provider scope, validity window, one-time/reusable semantics, allowed servicing actions, revocation state and evidence reference.

Delegated payment

Delegated payment is not unlimited spending authority. Bound it by amount, currency, destination/provider, refundability constraints, time window, transaction count and ancillary permissions.

Human-in-the-loop checkpoints

Useful checkpoints include price changes, non-refundable products, unexpected penalties, delegated-limit breaches, new payment methods, passenger/document changes, replacement booking while the first remains UNKNOWN and financially meaningful servicing.

Confirmation evidence

Persist immutable evidence tied to purchase intent and offer version rather than a generic "user said yes" flag.

Expiry and revocation

Mandates can expire, be revoked, become invalid after offer changes, or require new confirmation when thresholds are exceeded.

Failure modes

Using stale mandates for new offers, exceeding cumulative delegated limits, reducing confirmation evidence to logs, treating servicing as covered by purchase authorization and using revoked authorization from cache.

Observability

Track mandate issue/revocation, HITL trigger rate, confirmation acceptance/rejection, prevented limit breaches, expired authorization attempts and mandate-to-transaction correlation.

Production checklist

Use explicit mandate schemas, operation scope, amount/currency limits, expiration/revocation, immutable evidence, HITL policy, reprice invalidation, separate servicing authorization and complete audit trails.