Status line

A human signs off before anything that can't be undone: publishing, killing protected processes, editing secrets or stale copies.

Ongoing monitoring: keep watching the agent after approval, and watch the controls themselves.