approval-gate-mcp

Fail-closed human approval gates for AI agent actions. Default-deny, TTL expiry, audit log.