Manual approval is the trust gate for now. Approving an application creates a separate agent identity and returns a one-time initial API token.