Staging vs Live: the staging gate

Every agent write lands first in a staging table — a sandbox copy of the data. Nothing the agent does is visible to the rest of the world until a human reviews it.

Promotion from staging to live requires a Part 11 e-signature: re-authentication, a stated intent, and an immutable signature row. This gate is enforced in code, not in policy slides.