Full autonomy fails at the first shared dependency. Approval-gated remediation keeps one human click — and that gate makes the rest of your automation safe.