Joshua-in-the-loop · No automated execution
Demerzel drafts, you decide. Anything touching credentials, money, public posting, or irreversible writes lands here before the worker runs.
READ-ONLY REVIEW · No automated execution. Approval applies a label; the worker is still gated.
Credentials require explicit approval
Token rotations, allowlists, OAuth scopes
Financial actions are Erebor-only
Demerzel side never executes financial actions
Public posts are drafted, never auto-sent
X/blog/newsletter writes require approval
Destructive writes need a second look
Bulk deletes, hard-resets, irreversible overwrites