identify a target

decide to attack the target

implement the attack

determine the result of the attack

If humans are required for the decision, then humans have an inherent hook to prevent more attacks. Otherwise you run into scenarios like https://www.youtube.com/watch?v=pyMNIFZTQkg where humans are incapacitated and AI just continue on like nothing has happened. It makes the failure modes more sane. It's not a catch-all but a good agreeable step to take.