Sterile Cockpit for Irreversible Actions

Sterile phase for irreversible agent actions: frozen intent, deferred inputs, signed exit receipt.