An MCP proxy that enforces human approval gates and audit trails for tool calls (deploys, DB writes, payments), pausing risky actions until approved and logging decisions. Integrates with MCP clients (e.g., Claude Code, Cursor, Windsurf) and supports conditional policies, quorum/escalation, webhooks, and notifications to Slack, email, or mobile.