Favor Open Policy Agent as policy decision engine, standard OIDC/passkeys for human identity/approvals, and PostgreSQL for durable records. Independently protected connectors must enforce the decision and own secrets. Evaluate mature orchestration before implementing task durability from scratch.
TAP, withHuman, HARP, HumanAuth, Trigger.dev, SpecD and ASDD are candidates or references, not declared production dependencies or proven security boundaries. Assess licenses, self-hosting, maintenance and exact trust models before adoption.