Fail-closed by default: why agent approvals should block instead of fire and forget

An agent approval that assumes yes on timeout is an approval in name only. The case for fail-closed defaults, and what it takes to implement them.