The agent's word is not evidence

A green approval is a permission bit. It is not a receipt. Agents narrate confidently; logs, diffs, and deploy IDs are what hold under audit. If the only proof is the model saying it shipped, you do not have proof.

Treat tool transcripts, git history, HTTP status, and screenshots as the evidence chain. Ask what changed on disk or in production, not whether the agent feels done. The catch for operators: a denied run is clear; an approved run that lied is quieter.

Stack Gems keeps the veto for the same reason. Catalog copy ships when a human can re-open the catch. The agent proposes; the evidence decides.