Sign Off Social Actions
Let an agent draft likes, comments, replies, follows and subscriptions for your own accounts. A person you designate approves each exact action with a passkey, RateLoop paces the releases, and the agent acts only on a verified approval.
RateLoop never posts and never holds your platform credentials. The agent acts on your accounts in your browser or tools, and what it reports afterwards is recorded as host-reported, never as proof that a platform accepted anything. Pacing protects an account from bursts; it does not make automated activity acceptable to a platform. Follow each platform's rules on automation. Where a platform does not allow automated engagement, use the manual path: open the approved action, copy its text, open the post and act by hand.
1. Set up the agent
In the agent's Setup, apply the Social media engagement template. It uses named sign-off with one signer, an optional rationale, a 12-hour response window and reasons such as Sounds automated, Self-promotion, Repeats earlier wording, Spoils the story and Risk under platform rules. Designate the signer as the decision sign-off guide describes, and set the agent's permission to Send automatically so it can ask for each review and so a signer's edit can be sent at once.
Decision sign-off · Review templates
2. What the agent submits
Each proposed engagement on one public post is one social action: a rateloop.social-action.v1 document with the content type application/vnd.rateloop.social-action+json. A like, a comment and a follow on the same post form one action and one review case.
{"actions":["like","comment"],"platform":"youtube","schemaVersion":"rateloop.social-action.v1","target":{"creator":"@maker","url":"https://www.youtube.com/watch?v=abcdefghijk"},"text":"The cold light in the last shot is brilliant."}- Platforms are youtube, tiktok and instagram. Follow is the action on Instagram and TikTok; YouTube calls it subscribe.
- Each action appears at most once, in the order like, comment, reply, follow, subscribe. A comment and a reply exclude each other.
- Text of at most 2,200 characters is present exactly when the action writes, with line feeds as the only control characters.
- The target is an exact https address on the platform's own hosts.
- Only the canonical RFC 8785 bytes are accepted, so a signer can never see one action while the agent reads another. A changed text is a new version and needs its own sign-off.
3. Approve, edit or reject
In Humans → To review, the signer sees the action as a card: the platform, the creator, a link that opens the post in a new tab, the actions and the exact text. Rating AI reads only the comment or reply text and is never shown to the signer. The card warns when the wording is close to one this agent proposed in the last 90 days, or when the agent already engaged this creator in the last 24 hours.
- Approve or Reject, then Sign with passkey, as for any sign-off.
- Edit and sign changes only the text. RateLoop sends the edited version as a new review of the same agent, and Sign edited version rejects the original and approves your version with one passkey prompt. The agent then posts only your version.
- Sign together approves up to 25 outputs you opened on the page with one passkey prompt. Each approval is listed before the prompt, and either all are recorded or none is.
- Under Humans → Settings, Phone notifications and Turn on for this device send a notification to that device when a review is waiting. It says only that something is waiting. On iPhone or iPad, add RateLoop to the Home Screen first.
4. Pace the releases
Owners and admins open Social releases on the agent's overview. The Release policy sets the time zone, the daily window, daily caps per platform for each action, the minimum minutes between releases, an extra random wait, the actions per creator per day and how long an approval stays releasable. Until you save one, the defaults apply: 08:00 to 22:00 UTC, 10 likes, 5 comments, 20 replies, 5 follows and 5 subscriptions per platform and day, 10 minutes apart plus up to 15 random minutes, one action per creator per day and approvals releasable for 24 hours.
- A granted release is a slot of 15 minutes: the agent acts once, then records whether it posted or failed. An unused slot stops counting.
- When the agent reports a login prompt, a blocked action, a held or removed post or a CAPTCHA, every release of the agent pauses until you choose Resume releases. Deal with the account first; the agent never signs in or solves challenges.
- The panel shows the last 30 days: released actions per day and platform, approval and edit rates, the reasons signers gave for rejecting, release outcomes with their latest visibility checks and incidents.
5. The agent's loop
- Ask for a review with rateloop_request_review, sending the canonical action as the output with its content type, and wait with rateloop_wait_for_review.
- Verify the sign-off receipt for the exact bytes, the opportunity and the policy binding, for example with verifySignOffReceipt from the SDK. When the sign-off names a revision, the original is rejected: verify and use the revision's exact output under the revision's own receipt.
- Ask rateloop_request_release for a slot with the same bytes. When it answers wait, do nothing until retryAfterSeconds have passed.
- Act once, then record posted or failed with rateloop_record_release, and later checked with the visibility you observed.
- On any platform warning, call rateloop_report_incident and stop.
Agents without MCP use the same steps over REST: POST /api/agent/v1/releases, POST /api/agent/v1/releases/{releaseId} and POST /api/agent/v1/release-incidents, with the result:write scope.
Personal data
Sign-offs record the signer's designation and passkey signature as the decision sign-off guide describes. For repetition warnings RateLoop keeps a workspace-keyed similarity signature of each comment text and a digest of the creator, never the text, for 90 days. The release ledger keeps the target address, the permalink the agent reports and its visibility checks. An edited version is stored encrypted. All of it is deleted with the workspace.