Reference architecture

Gate order follows the control loop: Identity → authority → policy → risk context → approval → execution authorization → execution → tamper-evident evidence (hash-chained, signed checkpoints).

Identity and authority are established before policy evaluation. Approval gates hold execution until authorized humans decide.