A design pattern where the assistant proposes a change to application state but requires explicit user confirmation before executing it, maintaining user control.