Skip to main content

expose the "comment" an approver made inside the Approval Policy payload

eg:
```

"reviews": {

"current": {

"approvals": [{

"author": "some-user",
// Add this
comment: “OVERRIDE because I know better”,
// End Add
…

"session": {

…

"login": "some-user",

"teams": ["Special Group"]

},
…
}],

"rejections": []

},

},

```

Workaround
none really
Problem
Status: ✅ Completed7 comments

Log in to comment and vote

Comments7

  • Pink Jam

    •

    Jul 16

    This is quite important to us.

    • Natalia Gazda

      Team•

      Jul 17

      Thanks for letting me know Joshua! Then we’ll look into it again :)

  • Natalia Gazda

    Team•

    Jul 16

    Hey, thanks for the suggestion. We're archiving this one for now. It hasn't picked up much interest since it went up, so it isn't on our near-term roadmap. Archiving isn't deleting: the request stays on record, and if it gathers more votes or comments we can bring it back. If it still matters to you, add a vote or a comment so we can gauge the demand.

    • Yellow Chili

      •

      Jul 16

      This is still important to us.

  • Black Breeze

    •

    May 10, 2025

    Thanks for raising this—really valuable discussion.

    To clarify, the reason field entered during approval isn’t currently passed into policy evaluation. That’s not a deliberate design exclusion, but we’ve also been cautious about introducing it. Here’s why:

    That field is unstructured. It’s free-text, unauthenticated, and unconstrained. If we allow policies to depend on its content, we introduce a subtle but serious risk: letting arbitrary human input influence policy logic.

    It’s easy to imagine policies that check for certain phrases (“risk accepted”, “urgent fix”)—but those checks would be fragile, unenforceable, and invisible to review. The decision logic would live in human convention, not in code. That’s the concern.

    We want to make sure we don’t accidentally create a second, implicit policy system—one where behavior depends on who writes what into a text box.

    If there’s a real need to evaluate structured human input as part of an approval, that’s a different conversation—and probably a different mechanism.

    Would love to understand more about the use case if this is a blocker or a pattern you’re relying on.

    • Plum Pen

      •

      May 12, 2025

      The specific use case we wanted to implement I suppose is a bit more nuanced.

      We have a small group of privileged folks who we want to give a bit more “options”. So the idea was that if you’re part of that group, you can basically override the policy, right now we could have implemented that as a blanket permission in the policy where they don’t need approvals, but we didn’t want that, we wanted a way for that to be a conscious policy bypass, rather than not needing the policy in the first place ..

      kind of like how in Github authorized people (Admins) can bypass branch protections with an extra checkbox. (but we wouldn’t necessarily want to tie that to the Admin access level either perhaps .. )

    • Yellow Chili

      •

      Jun 11

      this is something we need as well because we have the requirement to add ticket numbers for approving a run in production - there is currently nowhere that we can grab info like this in a policy