pipeline gates

the AI does the work · you approve the ship · the authed env executes the chain
// the cockpit GRANTS · the authed env EXECUTES — this page only SURFACES the chain
grant → cockpit journal · authed env reconciles

no gates surfaced — the matrix is clear.