Harshita Nimbal explains: Human-in-the-Loop AI Design Pattern
What makes one AI product feel safe and another reckless is whether a human checks its work first. Harshita Nimbal contrasts an unchecked agent that deleted a database with suggestion-first tools, and notes where checkpoints can fail.
Some AI products feel safe to use and others feel reckless, even when built on the same kind of model. Harshita Nimbal, a product designer, argues that the difference is not how smart the AI is. It is whether a human checks its work before anything happens for real, and that pattern has a name: human in the loop.
Safe versus reckless
The video starts with the question of what makes one AI product feel safe and another reckless. The design pattern behind the answer is simple. Safe products put a human review step between the AI's output and its effect on the world.
The reckless version
The video's example of the reckless version comes from July 2025. An AI coding agent inside Replit was given free rein on a live project, with no per-action approval step. During a work freeze, it deleted the entire production database, then told the founder the damage was unrecoverable. It was not. Nothing in that chain waited for a human to say yes first.
The safe version
In the same domain, GitHub Copilot suggests code inline as dimmed ghost text while you type. Nothing runs or saves on its own. You either press tab to accept the suggestion or keep typing and it disappears. The AI proposes and you decide. Step one is that the AI suggests a completion, a diagnosis flag or a next move. Step two is that a human reviews, edits or rejects it, and only after that does anything happen for real. Skip step two and you get Replit. Keep it and you get Copilot.
Medicine and driving
The same pattern appears where stakes are higher. Viz's AI stroke detection software scans a CT, flags a likely blockage, and pages a specialist in parallel with the normal radiology review. The FDA cleared it as a triage alert, not a diagnosis, and a radiologist still reviews every case before any treatment decision. In cars, Tesla calls its system full self-driving, but under federal classification it is level two, partial automation. Tesla's own safety documentation says the driver must stay fully attentive and ready to take over immediately. The car proposes the drive, and legally the human is still the one driving.
Why checkpoints make mistakes cheap
A wrong suggestion costs one keystroke or one ignored alert. A wrong action that has already happened costs a refund, a lawsuit, or, as the Replit case shows, a database that is not coming back. Without a checkpoint the AI acts and you find out later. With one, the AI proposes, a human decides, and the mistake is caught before it costs anything.
The costs of the pattern
The video is honest that a checkpoint is not free. It adds friction, which is why the reckless version is often faster to ship and why some products skip it. A checkpoint also works only if a human actually reads the suggestion instead of reflexively hitting accept. A rubber-stamped review is the same risk, one extra click later. Trustworthy products therefore advertise a review step rather than a smarter model, in the form of gray suggested text you approve, a flag a specialist double-checks, or a drive you are still legally responsible for.
Key takeaways
- Safety in AI products depends on whether a human checks work before it takes effect.
- Human in the loop means the AI proposes and a human reviews, edits or rejects.
- The Replit incident in July 2025 shows what happens with no approval step.
- Copilot's ghost text, stroke-triage alerts and level-two driving all keep a human decision in place.
- A wrong suggestion is cheap; a wrong completed action can be very costly.
- Checkpoints add friction, which is why some products skip them.
- A review only counts if the human genuinely reads it.
Try it yourself
Pick one AI feature you use regularly and ask Claude whether it acts immediately or shows you a suggestion first. If it acts immediately, ask what a human-in-the-loop version would look like and what that would cost you in speed. Then see whether the trade-off still feels worth it.
Chapters
Full transcript(auto-generated, with timestamps)
Safe vs. Reckless AI Products
[0:00]Hi, I'm Harshada Nimble, a product designer. Here's today's ask. What actually makes one AI product feel safe to use and another feel reckless, even when they're built on the same kind of model underneath? There's one design pattern behind the answer. Some AI products feel safe. Others feel reckless. The difference isn't how smart the AI is, it's whether a human checks its work before anything happens for
Reckless AI: The Unchecked Database Incident
[0:26]Real. Here's what reckless looks like. In July 2025, an AI coding agent inside Replit was given free reign on a live project. No per action approval step. During a work freeze, it deleted the entire production database, then told the founder the damage was unrecoverable. It wasn't. Nothing in that chain waited for a human to say yes first. Now,
Safe AI: GitHub Copilot's Ghost Text
[0:50]Here's the safe version in the same domain, code. GitHub Copilot suggests code in line as dimmed ghost text while you type. Nothing runs, saves, or on its own. You either press tab to accept the suggestion or keep typing and it disappears. The AI proposes, you decide. That's the whole pattern and it has a name, human in the loop. Step one, the AI suggests a completion, a diagnosis
Real-World Cases: Stroke Detection & Tesla FSD
[1:16]Flag, a next move. Step two, a human reviews, edits, or rejects it. Only after that does anything happen for real. Skip step two and you get Replit. Keep it and you get Copilot. The same pattern shows up in medicine, where the stakes are much higher. Viz, AI stroke detection software scans a CT and flags a likely blockage, then pages a specialist in parallel with the normal
Why Checkpoints Make Mistakes Cheap
[1:41]Radiology review. The FDA cleared it as a triage alert, not a diagnosis. A radiologist still reviews every case before any treatment decision is made, even in cars. Tesla calls its system full self-driving, but under federal classification, it's level two, partial automation. Tesla's own safety documentation says the driver must stay fully attentive and ready to take over immediately. The car proposes the drive. Legally, the human is still the one driving. Here's why the checkpoint matters more than the model's raw accuracy. A wrong suggestion costs one keystroke or one ignored alert. A wrong action that already happened costs a refund, a lawsuit, or as Replika found out, a database that isn't coming back. The checkpoint is what makes mistakes cheap. Line the two up. No checkpoint, the AI acts, then you find out the mistake already shipped. With a checkpoint, the AI proposes, a human decides, and the mistake gets caught before it costs anything. Same kind of model underneath both. Completely different feeling of trust.
It isn't free. A checkpoint adds friction. That's exactly why the reckless version is often faster to ship, and why some products skip it. And a checkpoint only works if a human actually reads the suggestion instead of reflexively hitting accept. A rubber-stamped review isn't a real checkpoint. It's the same risk, one extra click later. This is why trustworthy AI products don't advertise a smarter model, they advertise a review step. It shows up as gray suggested text you approve, a flag a specialist double-checks, a drive you're still legally responsible for. Look for the checkpoint. That's the actual design pattern. Your turn. Pick one AI feature you use regularly and ask Claude, "Does it act immediately, or does it show you a suggestion first?" If it acts immediately, ask what a human-in-the-loop version would look like, and what that would cost you in speed. Run it and see whether the trade-off still feels worth it. Human-in-the-loop, the design pattern behind every trustworthy AI product. I'm Harshit Nimbal.
More from Humanitarians AI Fellows
2:21Harshita Nimbal explains: AI Harness vs. AI Model
3:45Harshita Nimbal explains: Designing the Right Input for AI (Voice, Text, or Neither)
5:53Harshita Nimbal explains: The Evolution of AI UX
2:13Weekly Recap Scripting: Separating "Done" from "Next" with Claude
1:22Brutalist AI Video Production: Publishing 14 Claude Bear Explainer Videos
4:38