Replay Chapter 39: Where a Decision Can Still Be Stopped

The recording runs the real agent loop with a scripted model that proposes a write to a protected path. Compare how many times the tool body ran in each run.