Auto-review offers a safer default for deploying coding agents, using a separate agent to approve or deny boundary-crossing actions.