Agents propose actions such as:
- Approve, deny, or modify access
- Revoke unused or excessive permissions
- Escalate based on risk or impact
- Prioritize review focus
Each recommendation includes clear reasoning, not opaque scoring.

