A two-person rule for AI coding agents

Implementing a local, SHA-bound approval ledger ensures that code produced by AI agents can only be pushed after a proper review, preventing stale approvals and