three lines model

kill switch and override interface

Accountability roles become concrete only if the runtime exposes interpret, override, and shutdown capabilities to a named operator.

1 source videos