Acceptance criteria as guardrails — green runs alone, yellow waits for a person, red never runs without a click. Auto = done for you · Suggest = drafted, you approve · Confirm = always asks first. Money and clinical-record actions are locked to Confirm.