The system proposes — a human disposes
every change: drafted with evidence · approved · applied · re-examined +2 weeks
auto re-examined · +2 weeks · append-only ledger
Audit
finds the issue
Proposal
+ evidence
Human
approves ✓
Apply
validated first
Verify
did it help?