insta events.Concepts
Governance
Allow / deny / approve gates at the credential boundary.
The daemon is the only thing holding credentials, and every sensitive action passes an allow / deny / approve gate before it touches a resource.
Agents propose, humans approve: a gated action parks until someone approves it; an agent that ignores its instructions still cannot get past the gate. Every action lands in