Before the robot moves, FoldEngine runs the action in a protected projection. Unsafe proposals are blocked before actuation. Safe proposals proceed with an inspectable receipt (conceptual).