Power needs a brake
An agent that can install, migrate and upgrade your ERP can also, in principle, break it. Handing over that power is only sane if there's a brake — a point where a human sees exactly what's about to happen and can stop it.
Show, then do
Every destructive operation runs in two beats. First a preview: the plan, the exact commands, what gets changed, what gets touched. Then — only after you confirm — the action. No silent steps, no "trust me".
Why it's enforced, not optional
A preview you can skip isn't a safeguard. The gate is built in: the destructive call literally won't execute without the confirmation that follows a shown plan. It protects you even from an agent that misunderstands the task.
What this buys you
Confidence. You get the speed of automation without the leap of faith — an auditable trail of what was proposed, what you approved, and what actually ran. That's the difference between a tool you use and one you have to babysit.