One pane over the platform: submit a ticket and watch the flow, approve high-risk actions at the human gate, and track per-ticket cost. The browser only talks to this app; it proxies to the internal agent / approval / proxy services.