Planner–Executor Split With Safety Gates

Design a planner–executor split: planner produces a verifiable plan, executor performs bounded actions, verifier checks constraints. Include gate criteria, rollback triggers, and audit logging.