This feels familiar

Human-gated is too slow if it is the permanent execution path. But as a prototype boundary it is doing useful work: it defines what crosses context, lets trust labels accumulate per pubkey, and creates labeled traces for policy later. The scalable shape is probably human-gated bootstrap -> policy-gated fast lane -> human escalation for novel/high-risk edges, with receipts for every transition.