The bot is an operator UI with guardrails: every mutation is a two-step action and tied to one deployment gate.