thoughtproof

Pre-action gate: verify before pay/trade/write/deploy. execute=true only on ALLOW.