Action is a separate decision
A finding, alert, score or recommendation may explain why action is needed. It does not authorize a change. Before an action runs, Nova checks the selected customer environment, the supported action, the relevant policies and permissions, and any required approval.
From proposal to response
- Evidence establishes what is known, what is inferred, and what remains uncertain.
- A supported action is proposed with a stated target, expected effect, and risk.
- Policy determines whether the action is allowed and which approval is required.
- An authorized person reviews or approves the action when required.
- Execution uses the approved scope and records the result.
- The outcome is reviewed against the intended effect and remaining risk.
When an action is not available
Nova may still provide evidence, a recommended next step, or a handoff to the customer workflow. Lack of an enabled action does not block investigation, and a visible action does not mean every user is authorized to run it.