Summary

The approval queue infrastructure exists (api/approval_store.py, ApprovalItem model), but there are no engine-level gates that actually block execution pending human approval. The §12.1 flow (SecOps evaluates → auto-approve or → human queue → override/alternative) is not wired up.

Design Spec Reference

• §12.1 Approval Workflow (full flow diagram)
• §12.2 Autonomy Levels (which actions need approval)
• §12.3 Security Operations Agent (integration point)

Scope

• Wire SecOps evaluation into the engine execution path
• Block execution when human approval is required (per autonomy level)
• Route blocked actions to the approval queue
• Resume execution when approval/denial arrives
• Integration with park/resume service (already implemented in security/timeout/)