Human-in-the-Loop Gateway

Triggered by Circuit Breaker

Sessions crossing the 40-point risk threshold are automatically frozen and routed here.

Ed25519 Signatures

Each decision is cryptographically signed in-browser. The signature is stored in the audit ledger.

Tamper-Evident Log

All approvals and rejections are chained in the audit log with hash verification.