It looks first, then shows you a plan.
Before changing anything, the agent can look around with read-only commands and propose a plan: what it found, each step with its host and commands, the risky steps flagged, and how to roll back. Its steps run only once you approve it.













