reelier-write-safety

Bound and record an agent's writes before granting them. Use when the user is adding or configuring an MCP server, planning to run an agent unattended or on a schedule or in CI, or deciding whether to give an agent write access to a real system. Covers the recorder, the policy seatbelt, approvals, and what a receipt does and does not prove.