One gate for every action your AI agents take. The right person signs the big ones, on a ledger no one can quietly edit.