Confidence is not permission. Stop or escalate when consequence outruns evidence.
Declare consequence and evidence thresholds.
Stop when required controls fail.
Escalate uncertainty to a human.
Record the reason and fallback.
Govern when AI must not continue.