Actions
Write actions the Factory has proposed. Each one is drafted, not done — nothing executes until you approve it here. Proposing and approving are separate steps, so no irreversible effect ever happens in one motion.
This is the human gate. deploy fires a build hook (rebuilds committed code, reversible via rollback). repo-write commits a file to a project's repo (reversible via git revert) — you see the exact path and content below before it lands. Nothing runs until you approve it.