HOOTL (hands off the loop) is for inner loops that are continuously verified and low-blast-radius.
HOTL (human on the loop) keeps humans interruptible on outer cycles without requiring every micro-step.
HITL (human in the loop) gates sensitive actions behind explicit approval.
The kill switch is non-negotiable: autonomy that cannot be halted is not shipped as a feature.