Why This Exists
Make stop, cancel, and recoverability visible
People understand the problem when a process keeps running after they pressed cancel. This demo uses the same SMERC logic for local actions: execution is allowed only when the action is understandable, containable, and recoverable enough for the current risk.