No direct model writes to the DB. Server-side business rules validate every proposal. Low-confidence cases go to human review.
Hard constraints and deterministic server-side checks.
Configurable thresholds for auto-assignment and review.
History of tool calls, inputs/outputs and decisions up to final insertion.