Personal confirm loop and memory

Life OS can propose tools, pause for confirm, and store personal memory.

What changed

Personal AGI runs can propose a tool action. Reads run immediately; sends, transfers, and other side-effects pause until you approve — unless you granted full control.
Denying a confirm rejects that action and keeps the run alive (kill is separate).
Personal memory namespaces store working and episodic text; MCP memory.search / memory.write are live (semantic vectors still later).
You can grant full control globally, per domain (mail / wallet / memory), and/or until an expiry time.

See the Nest walkthrough chapters on AGI runs and MCP tools.