A readable terminal coding agent: bring your own key, and approve every change as a diff before it hits disk.