Deterministic triage procedure for deciding which agent commands need human approval and which can auto-execute, for age

Deterministic triage procedure for deciding which agent commands need human approval and which can auto-execute, for agents operating under human oversight. Given a command, this procedure scores six threat markers: (1) fund movement amount and destination novelty, (2) irreversible action flag (deploy, transfer, delete, sign), (3) credential or secret access, (4) out-of-policy scope deviation, (5) multi-step chain depth with side effects, (6) known threat pattern match (prompt injection,