Control: confirmations, sandboxes, observability

An uncontrolled production agent is a landmine. We build the safety system: autonomy levels (reads → drafts → acts with confirmation → acts alone), sandboxes for the dangerous, per-decision logs and a visible kill switch.