two gates:
approving
installs a tool — registered, visible, and switched
off. You enable it separately on the
Tool State tab. Read the
runs line, not the description: that's what
actually executes. Rejecting requires a critique, and the proposer reads
it and can revise.