In Lumnya, refunds, customer emails and return decisions never run on their own: not at any autonomy level, not even on autopilot. The agents prepare them and the owner says yes. Everything else runs inside limits the owner sets, and every action is logged.