Scenarios
Cycle 1: CPU success
AUTO
Tier-2 noisy neighbor → OPA allows → graceful reboot → verified.
No human intervention.
Cycle 2: tier-1 blocked
BLOCKED
Tier-1 service hot → OPA hard-block tier1_protected.
Case stops, customer sees the safety property.
Cycle 3: approval required
APPROVAL
Confidence ~0.78 (attribution gap is narrow) → request_approval.
You click Approve in the dashboard. Workflow proceeds.