Human in the loop
Every outbound action is approved by a named processor.
Adeft prepares and queues; nothing sends without approval. The approval surface is where the human-in-the-loop promise lives, and that surface is reversible, attributable, and auditable. There is no "autonomy mode."