Route AI agent actions by how hard they are to undo, not by how hard they look. One-way doors get the best model and a human; reversible work does not.
A reversibility layer for agentic tool use: a transparent MCP proxy that classifies which tool calls can be undone, synthesises inverse operations, keeps a durable cross-server undo log, and interrupts you only for genuinely irreversible actions.