MCP-style approval surface with risk, payload, and audit context.

A governed approval interface for high-risk tools where the browser renders context but never executes privileged actions directly.