A private AI assistant that can draft real actions — refunds, emails — but can never run one on its own. Everything it proposes waits for you to approve; only then does it execute, on your device, from your own handler. The agent never holds the credential.
space.privateLane({ actions }) plus on('proposal') + approve(). The private room is sealed to a key the server never holds; the propose→approve→execute flow is the runtime's. Actions here are simulated; a real app wires each run() to its API.