Proposal: an agent submits signed intent with actor, action, scope, and connector.
Execution boundary: HELM checks identity, policy, risk, approval state, and connector grant before any side effect.
Verdict and proof: HELM allows, denies, or escalates, then records a replayable receipt.