Seven checking components work in a fixed order, from the input filter through tool guard and loop guard to the output review. Fixed rules take effect first, the language model only as the last resort: that keeps governance fast and cheap.
Each component can be switched individually: off, observe, enforce. Governance is introduced like a process: observe first, then enforce. When in doubt, the rule is stop rather than let through, and every decision lands in an immutable log.
Whatever is uncertain goes to the inbox as an approval card. An approval runs exactly once, even when two processes access it at the same time.