Destructive write

Also written: destructive writes

A write tool whose effect can't be undone, like cancel_order. It needs confirmation and limits enforced in code.