Expose a mutation high -risk

An irreversible or externally observable mutation must have a narrow intent, computable authority, and explicit repetition behavior.

Checklist

• Declare risk_level: 'high' according to the worst path permitted by the Tool.
• Keep configuration/credential identities under control designer.
• Explicitly decide which effect parameters may be model-controlled; do not delegate a recipient, amount, or external account by default.
• Validate authority and business transitions in the canonical service, not in the prompt.
• Document actual idempotency, uncertain outcomes after timeout, and the reconciliation path.
• Never present a confirmation requested from the model as an implemented security gate.

Sending an email remains high-risk even when its content is benign: the external effect has occurred. See Tool risk level.