Preview + confirm
Show action + await user confirmation. Especially for external effects.
Advertisement
Soft delete
Trash bin for 30 days. User can recover. Applies to files, emails, DB records.
Advertisement
Draft mode
Emails saved as draft. Manual send required. Recoverable if agent wrong.
Transaction with review
DB changes go to review queue. Auto-apply after N days or manual approval. Reduces bad-write blast.