Built an approval layer between Claude and Gmail / Calendar — every action signed with a payload hash, locked by an invariant test