How would you design a human-in-the-loop workflow to validate an AI-driven access request at S&P Global?