Propose, then confirm
The model never writes to your records directly. Every action it wants to take is rendered as a dry run a person approves or dismisses. A wrong answer costs one dismissed card, not a corrupted ledger. This is how Sable handles money.
How Sable keeps the model away from money →