Governed AI: it proposes, you approve

The AI copilot drafts changes; a person decides. When a dependency finding blocks a build, the governed AI gateway can draft the fix and open a pull request for it. You read the diff and approve before anything reaches your code or your cloud. Key points:

• Human-in-the-loop is the rule: the platform drafts, you review, nothing irreversible runs unattended.
• The copilot can assist beyond CVE fixes, but the pattern is the same every time: it proposes a change you review, not a change it applies on its own.