Skip to main content
The daemon is the only thing holding credentials, and every sensitive action passes an allow / deny / approve gate before it touches a resource.
Agents propose, humans approve: a gated action parks until someone approves it; an agent that ignores its instructions still cannot get past the gate. Every action lands in insta events.