Architecture Note · active

Model intent is not system authority

Sensitive local operations remain behind explicit policy and approval boundaries instead of being authorized solely by generated model intent.