What human-in-the-loop costs once it stops being a stub

Part 4 of an ongoing experiment: building an LLM-powered support agent with deterministic boundaries. The companion repo grows with the series.

The rules say the customer is owed a €512.64 refund. The agent agrees. The API is one method call away. Who presses go?

That one line of code is where "AI-assisted" becomes "AI has authority." An agent can be perfectly capable of deciding that a refund is justified without being allowed to issue the refund. Deciding and doing are different permissions. That's the boundary I wanted to make impossible to blur.

The decision: separate judgement from authority (ADR 002)