countersign

Reads run alone.
Writes wait for you.

An AI agent operating a real admin panel — it reads on its own, and waits for a human before anything it can’t undo.

Frozen at the approval gate. The live version runs a real local model.

Reads run alone

Query and filter execute on their own — the table reacts live, nothing waits.

Reversible writes wait

A radius-1 change runs immediately, then waits: undo lives on the action until the next write.

Destructive writes halt

The engine stops at the gate. Nothing irreversible runs until you approve — all, some, or none.

Interface patterns