Your agent proposes. You approve. Your data never leaves the tab.
Pick a tool and run it.
Read tools carry readOnlyHint: true and run immediately. Every tool that would
change your data is human-gated: it stages a diff and stops. undo is deliberately
not exposed to the agent โ walking a change back belongs to you.