Explain the confirmation lifecycle for conversational sandbox presets and
narrow permission grants across protocol, core, app-server, and TUI replay
state.
Call out where clients own confirmation, where core applies accepted
responses, and how late or partial responses should be interpreted.