The human gate

Nothing executes on its own. Approving runs the real cluster action and writes the attestation together — both are irreversible, so the reasoning and the measured cost are shown in full first.