From a card to an approved change Diagram

Why recall is a step, not a prompt

The API runs the search and writes the result into the first message
The model cannot skip it — the facts are already there
Scoped to the project: a note from another project never leaks in

What waits for you

Every mutating tool call renders as Allow / Deny in the chat pane
Multiple-choice questions arrive as widgets, not terminal text
Denied means the agent replans — it never bypasses

What the loop leaves behind

A journal entry per action — the basis for reverting
A memory note (memory_write) when something durable was learned
A card that only a human moves to Done