Advisory-first deployment, hard constraints and failsafe operating modes give operators a measured route from AI recommendation to controlled