Write-path safety chain Every channel_write passes three gates in order — the writes_check kill switch, the limits database, and the human approval gate — before the MCP server executes it; failing any gate blocks the write. ENABLED VALID APPROVED DISABLED INVALID REJECTED Osprey agent channel_write writes_check kill switch limits min · max · step approval human gate MCP server executes write blocked write refused