TrueForge change-control agent: real MCP tools, sandboxed analysis, human approval before irreversible production changes.