queued → working → needs human → done | failed. High-risk work stops for human approval; Hermes never merges main.