Agentic Covenants / Agentic Interventions Matrix

Approval gating at Client-side cutoffs

This layer is fast.

Replace approval hook with deny-all, disable Auto Mode classifier, disable judgment-query escalation channel, force out-of-band on every action.