Consumer controlsThe end-user boundary for OIDC sessions, profile, memory, Actions, and receipts.→Human approvalSeparate an Agent's proposed effect from the end user's explicit decision.→Prepare, approve, and executeRequire explicit user approval before an Agent operation can cause an effect.→