Checkpoint and rollback

Users will not grant autonomy they cannot undo.

Every reversible action has a restore point the user can name. Irreversible actions are labelled as such before confirm. Rollback is shown before the act, not after the incident.