Features
The frontend is deliberately thin: it validates input, stages every write for human review, and lets the backend own the risky work.