朱子纯 / xlyNewAi

…rminal + reconcile on reconnect; manual stays sync

… terminal (no chaining), validate-only

…oposeWrite ends turn on draft

…nistic /op/{id}/confirm endpoint (not a tool)

…lt); ERP real-time exec via /ai/execStaging + two link modes

…on dropped, form-level only via sAuthsId; Query security simplified

…Ai authorization layer; Read not permission-safe + param whitelist; invoke not backend-safe

…oseWrite covers mutating button-actions

… ERP procs, Query = ad-hoc-only

…; NL2SQL security pending investigation