Human inbox for agent-proposed actions (ops_approvals). Mutations stay gated by AGENT_MUTATIONS_ENABLED.