Operator console — governed recommend → approve → execute