Guards

A human signs off before anything that can't be undone: publishing, killing protected processes, editing secrets or stale copies.

Effective challenge: hold answers to evidence under pushback, and check agents' commit claims against git.

Development standards: look before building, test what changed, pass the repo's checks, keep the rules in view.

Ongoing monitoring: keep watching the agent after approval, and watch the controls themselves.

Outcomes analysis: check what a reply claims against what the evidence supports.

Documentation: leave a trail a reviewer can follow, and keep what can't be rebuilt.