The risk isn't permissions. It's irreversibility.

When Auto stops, what’s left is the judgment call. Restarting can mean an irreversible action your agent is allowed to take—send, publish, charge, or commit. sosense6 is built for that interrupt.

Rare stops for irreversibility. No fourth Y/N gate.