World
Approvals before anything ships
The operator is allowed to be fast. It is not allowed to be unsupervised on the steps that spend, send, or delete.
A useful operator without a stop is a liability. Kaer's stop is not a vibe and it is not a system prompt. It is a gate on the actions that leave the building.
You set who can sign. You see what is waiting. You can reject a step without throwing away the rest of the run.
This is the difference between delegating an outcome and hoping a chatbot does not email the wrong customer.