Analog human switch for irreversible actions
No irreversible outcome (weapons and anything that can cause mass harm, and anything else that cannot be undone) is ever completed by software or an agent. The owner, in person, turns a registered analog key wired in series with the actuation circuit, then separately confirms they ordered it and want it to occur. Identical backup units mean a broken unit never blocks the owner; lost or broken units are revoked. Agents prepare, rehearse and request; they never execute.