Preview-then-confirm writes
A write pattern where the first call describes the change it would make and applies nothing, and only an identical second call carrying an explicit confirmation performs it.
In detail.
The first call returns what would change: which entity, from what value to what value, in which currency. Nothing has happened yet. The same call repeated with a confirmation flag performs the change. The model cannot skip the first step because the second one refuses without it.
The related convention is that newly created campaigns are created paused, so activating spend stays a human action taken in the platform.
Through an agent.
What changes when a model asks instead of a person.
The pattern exists because a model that misreads a budget by a factor of a million spends real money before anyone reads the transcript. Two calls make the intended change visible in the conversation while it is still reversible.