Operators can see why an agent acted, which systems influenced it, and which policies authorized it.

Divergence between observable agent behavior and explainable execution lineage. Detected. Held. Reviewed.

All agent execution flows through a governed harness. The browser is never the execution authority.

Risk-scored intents require permission ladders. Higher risk demands higher tier.