Countersign needs JavaScript: it is an approval-gated agent that changes nothing until a human countersigns.