Skip to main content
Guides · Control plane

Run, Approve, and Kill: How Bryn's Control Plane Keeps You in Charge

Handing any tool the ability to act on your behalf raises an obvious question: what if it does something you didn't want, and how would you even know? That question deserves a real answer before you turn anything on, not a reassurance after the fact.

Bryn's answer is three controls that sit under every automated action: a default running mode, an approval mode you can require for anything sensitive, and a single kill switch that stops everything, plus a full, permanent record of what happened and why. Every one of these actions happens inside a Play, the rule you set once, in plain terms: when this happens, on an account like this, do this. Never on Bryn's own initiative outside a Play you've approved.

The unit everything else controls

Every control in this guide governs one thing: a Play.

Before Run mode, Approve mode, or the kill switch mean anything, it helps to know exactly what they're controlling. The docs break a Play into three parts:

"Anatomy of a Play. Trigger: what the account did... Conditions: who it applies to... Actions: what happens. Alert Slack, draft outreach, update the CRM. Outbound actions can hold for a human review first."

— docs.civic.com/bryn/plays

Plays exist in the first place because knowing about a good-fit account isn't the same as doing anything about it:

"Identification without action is a dashboard you will stop checking."

— docs.civic.com/bryn/plays
Trigger

What the account did: a named signal firing, a score crossing a threshold.

Conditions

Who it applies to: which accounts, segments, or scores this Play is even allowed to run for.

Actions

What happens: a Slack alert, a CRM update, a drafted outreach message. Outbound actions can hold for review first.

Mode 1 of 2

Run mode: the default

Most Plays live here. Once you've approved a Play, in Run mode it fires end to end the moment its trigger and conditions match, posting the Slack alert, updating the CRM record, sending the outreach draft, without waiting on a click from anyone. That's the entire point of setting the Play up once: the work of noticing and deciding is already done, so acting on it doesn't need to wait for a person to be at their desk.

Run mode isn't unbounded, though: it only ever runs inside the trigger and conditions you set. A Play with narrow conditions simply never fires outside them, in Run mode or otherwise.

Mode 2 of 2

Approve mode: for anything sensitive

Some actions are worth a second set of eyes before they leave the building: outreach to a prospect, a write to a system of record you care about. Approve mode is the opt-in setting for exactly that case. Bryn still does everything up to the action itself: it watches, scores, and drafts. It just holds there instead of sending, per the anatomy quote above, "outbound actions can hold for a human review first", until you give it a one-click yes.

You choose Approve mode per Play, not globally, so a low-risk internal notification can stay in Run mode while a customer-facing outreach Play requires your review every time.

The override

The kill switch

Underneath both modes sits one override that beats them both, instantly:

"The kill switch is a single click."

— docs.civic.com/bryn/plays

You can stop everything at once, or scope the stop to one region, one segment, or a single Play, whatever the situation actually calls for. And the stop itself isn't silent: it's written to the same record everything else is, so there's never a question of whether something was paused and when.

The record underneath all of it

The audit trail

Every action a Play takes, in either mode, is written to a permanent record: what the Play saw, why it scored the way it did, and what it actually did about it.

"Every action is on the record."

— docs.civic.com/bryn/plays

Two specific mechanics worth knowing, because they're the kind of detail that matters the first time something goes slightly wrong. First, writes to your CRM are additive, not destructive:

"CRM: Bryn writes additively. It fills empty fields and adds notes and flags; it never overwrites data your team entered. Conflicting values go to a review queue instead of clobbering the record."

— docs.civic.com/bryn/outputs

Second, the score behind every action is never hidden from you, and it never leaves your workspace either:

"The score is never sent to your website... You react to who they are (entity/individual) and what they've done (signals), not to a number."

— docs.civic.com/bryn/icp-and-scoring, docs.civic.com/bryn/frontend-recipes

In plain terms: what your site or your team ever sees is the account and the named signals, Bryn's word for a plain, named read on a behavior pattern, like a repeat pricing visit, that led to a decision. The raw composite number stays internal to the audit record, for anyone who wants to check the reasoning later.

The three lines, together

You hold the leash. Always.

"Nothing sends without you."

— docs.civic.com/bryn/plays

"The kill switch is a single click."

— docs.civic.com/bryn/plays

"Every action is on the record."

— docs.civic.com/bryn/plays

"Autonomy inside bounds is the whole design. Every control is a feature you can point your reviewers at."

— docs.civic.com/bryn/plays
What's next

Where to go from here

If you haven't set Bryn up yet, start with onboarding. If you're technical and want the protocol-level detail underneath the control plane, the GTM engineering track is the deeper end of the pool.

Sourced from

  • docs.civic.com/bryn/plays
  • docs.civic.com/bryn/outputs
  • docs.civic.com/bryn/icp-and-scoring
  • docs.civic.com/bryn/frontend-recipes