What it checks
Delegation scopedoes the proposed action fit the delegated authority?
Intent bindingdoes the action match the declared intent?
Tool contractrole, tool, operation and resource constraints
Evidencerequired support before execution
Human approvalproduction / high-impact change gates
Privileged controlssecret, exec, cluster-admin, destructive action declarations
