Require a human approval signal before an AI agent can post PR reviews, comments, merges, or writes to CI configuration. Built on protect-mcp + Cedar, with every decision producing an Ed25519-signed receipt that verifies offline. Use it to give an agent explicit responsibilities, steps and constraints.