Passive logging, active blocking, multi-device diary and daily digest. One-line integration: Guard asks for approval before risky actions, Audit logs after the fact—non-blocking.