Policy before action
Consent, spend caps, service state and commercial thresholds gate execution.
Trust is an operating system, not a badge.
Fail-closed controls, maker-checker authority, customer remedy and reversible execution are part of the product flow.
Human authority
Material changes use maker-checker separation and evidence-linked approval.
Evidence after action
External references, idempotency and remedy stay attached to the outcome trace.