Plan → Run → Verify → Review
Engineering-safe mode keeps every first repo action sandboxed: build the coding-agent blueprint, deploy into a governed target, run review-first, then promote only after engineering-owner acceptance.
1PlanChoose an engineering issue/spec, repo context, success criteria, and approval boundary.
2RunExecute the coding-agent workflow in a sandboxed target with scoped tools.
3VerifyRun checks, tests, build, lint, typecheck, and repair loops before handoff.
4ReviewCompile Proof Report evidence, rollback refs, cost, policy, and owner decisions.