PLAINSPEAK TERMINAL

say what you want in plain words · you see exactly what will happen · nothing runs until you confirm · every run is signed and reversible

propose translates words to a typed action -- data only, nothing touched.
confirm is the only path that executes -- and it signs an attest onto the logbook.
system intents lower to bash / PowerShell; you preview the exact native command; mutating runs attest command_exec/v1 with the real exit code, and an inverse is offered where one exists.
there is no verb for exec, sudo, sign, or append-event -- those messages cannot be said. egress stays behind the guard; the secret surface refuses.

SIGNED HISTORY

every execution, on-chain, newest first