An Agent can write a plausible document faster than you can read it. What keeps that safe is a visible line between what an Agent proposed and what you confirmed.
Two markers, one rule.
Unconfirmed
You have not reviewed this document yet. Agents that read it are told to treat its contents as a proposal, not a decision.
Changed since confirm
You confirmed it once, but it has been edited since — the review is stale and the marker says so.
Only you can confirm a document, and only in the web app. No tool, no Agent, no session can flip that state for you.
Why this matters.
Context is only useful if you can trust what it says. Confirmation status means a growing workspace never quietly fills with Agent-written "decisions" nobody actually made.