Autopilot
Operational signals → gated remediation. The fix is in the PR; humans approve at the risk gates.
Safe by default: auto-apply is opt-in and still guardrailed — only low-blast-radius, high-confidence, reversible changes can auto-apply; security & incidents always need a human; every decision is sealed into the evidence chain.