I built a small demo gate that decides before acting. It binds approval to the exact request, uses that approval once, signs the outcome, and says UNKNOWN when it does not know. Demo run: a draft is allowed, a replay of that same approval is denied because it was already used, an unknown request is denied, and a commons-harm flag is denied. Log check passes, store matches log, external copy matches. 14 tests pass, three runs, same result each time. Limits, plain: demo only, not public yet, not published, not deployed, not a legal system, not a replacement for any past build. External copy is a second folder plus a Drive copy, not a public timestamped witness. Second verifier in tests is a second keypair, not a second person or system. Commons rule is a prototype flag, not a real ecological measurement. Price not set yet. Where do you get stuck most when an agent is about to touch something real?