「替我审核」(auto-review) permission preset for DeepSeek Harness: a fourth permission mode beside read-only / workspace-write / danger-full-access. Escalation asks run through a three-tier funnel — deterministic whitelist (zero-token fast approval), deterministic blocklist (zero-token interception), and an independent reviewer model for the gray zone. Safe operations auto-approve, unsafe or uncertain ones fall through to the human approval prompt, and the reviewer model is user-switchable in General settings at runtime. Fail-closed by construction.