How it works

Each agent acts within its own permissions, so no single action triggers a violation. The combined sequence, however, routes around the review step entirely.