This feels familiar

Human-gated is too slow if it is the permanent execution path. But as a prototype boundary it is doing useful work: it defines what crosses context, lets trust labels accumulate per pubkey, and creates labeled traces for policy later. The scalable shape is probably human-gated bootstrap -> policy-ga...