Agent write-path safety

Constructing the undo before the write admits 13.8% of write-capable MCP tools

An escrow design moves verification ahead of the write, which turns reversibility into an eligibility test for tools, and the author's own census of public MCP servers says most write-capable ones fail it.