Run, Approve, and Kill: How Bryn's Control Plane Keeps You in Charge
Handing any tool the ability to act on your behalf raises an obvious question: what if it does something you didn't want, and how would you even know? That question deserves a real answer before you turn anything on, not a reassurance after the fact.
Bryn's answer is three controls that sit under every automated action: a default running mode, an approval mode you can require for anything sensitive, and a single kill switch that stops everything, plus a full, permanent record of what happened and why. Every one of these actions happens inside a Play, the rule you set once, in plain terms: when this happens, on an account like this, do this. Never on Bryn's own initiative outside a Play you've approved.
Every control in this guide governs one thing: a Play.
Before Run mode, Approve mode, or the kill switch mean anything, it helps to know exactly what they're controlling. The docs break a Play into three parts:
"Anatomy of a Play. Trigger: what the account did... Conditions: who it applies to... Actions: what happens. Alert Slack, draft outreach, update the CRM. Outbound actions can hold for a human review first."
— docs.civic.com/bryn/playsPlays exist in the first place because knowing about a good-fit account isn't the same as doing anything about it:
"Identification without action is a dashboard you will stop checking."
— docs.civic.com/bryn/playsWhat the account did: a named signal firing, a score crossing a threshold.
Who it applies to: which accounts, segments, or scores this Play is even allowed to run for.
What happens: a Slack alert, a CRM update, a drafted outreach message. Outbound actions can hold for review first.
Run mode: the default
Most Plays live here. Once you've approved a Play, in Run mode it fires end to end the moment its trigger and conditions match, posting the Slack alert, updating the CRM record, sending the outreach draft, without waiting on a click from anyone. That's the entire point of setting the Play up once: the work of noticing and deciding is already done, so acting on it doesn't need to wait for a person to be at their desk.
Run mode isn't unbounded, though: it only ever runs inside the trigger and conditions you set. A Play with narrow conditions simply never fires outside them, in Run mode or otherwise.
Approve mode: for anything sensitive
Some actions are worth a second set of eyes before they leave the building: outreach to a prospect, a write to a system of record you care about. Approve mode is the opt-in setting for exactly that case. Bryn still does everything up to the action itself: it watches, scores, and drafts. It just holds there instead of sending, per the anatomy quote above, "outbound actions can hold for a human review first", until you give it a one-click yes.
You choose Approve mode per Play, not globally, so a low-risk internal notification can stay in Run mode while a customer-facing outreach Play requires your review every time.
The kill switch
Underneath both modes sits one override that beats them both, instantly:
"The kill switch is a single click."
— docs.civic.com/bryn/playsYou can stop everything at once, or scope the stop to one region, one segment, or a single Play, whatever the situation actually calls for. And the stop itself isn't silent: it's written to the same record everything else is, so there's never a question of whether something was paused and when.
The audit trail
Every action a Play takes, in either mode, is written to a permanent record: what the Play saw, why it scored the way it did, and what it actually did about it.
"Every action is on the record."
— docs.civic.com/bryn/playsTwo specific mechanics worth knowing, because they're the kind of detail that matters the first time something goes slightly wrong. First, writes to your CRM are additive, not destructive:
"CRM: Bryn writes additively. It fills empty fields and adds notes and flags; it never overwrites data your team entered. Conflicting values go to a review queue instead of clobbering the record."
— docs.civic.com/bryn/outputsSecond, the score behind every action is never hidden from you, and it never leaves your workspace either:
"The score is never sent to your website... You react to who they are (entity/individual) and what they've done (signals), not to a number."
— docs.civic.com/bryn/icp-and-scoring, docs.civic.com/bryn/frontend-recipesIn plain terms: what your site or your team ever sees is the account and the named signals, Bryn's word for a plain, named read on a behavior pattern, like a repeat pricing visit, that led to a decision. The raw composite number stays internal to the audit record, for anyone who wants to check the reasoning later.
You hold the leash. Always.
"Nothing sends without you."
— docs.civic.com/bryn/plays"The kill switch is a single click."
— docs.civic.com/bryn/plays"Every action is on the record."
— docs.civic.com/bryn/plays"Autonomy inside bounds is the whole design. Every control is a feature you can point your reviewers at."
— docs.civic.com/bryn/playsWhere to go from here
If you haven't set Bryn up yet, start with onboarding. If you're technical and want the protocol-level detail underneath the control plane, the GTM engineering track is the deeper end of the pool.
Sourced from
- docs.civic.com/bryn/plays
- docs.civic.com/bryn/outputs
- docs.civic.com/bryn/icp-and-scoring
- docs.civic.com/bryn/frontend-recipes