HITL cannot exist merely as a confirmation button at the UI layer; it requires cryptographic or hardware-level guarantees; the stronger the AI agent's autonomy, the more urgent the need for a trusted execution environment.