[iamnbutler]

Found running #120's live checks through the native2 dev app with the user.

• Fix: Tools.admission treated Desktop Tools' own UI as open only once a prompt window was on screen. The app shows its caller prompt asynchronously, so input sent right after an unknown caller's refusal got through before the prompt existed. The live check's desktop_focus completed. Admission now also counts Callers.asking, the callers the app was asked about that the user hasn't answered. Every question ends in a decision, made from the prompt or the menu, and setDecisions clears it, so input can't stay held.
• Harness: live-check's perl launcher used one-argument system, which splits on whitespace. With --server under Application Support, the server failed to exec (exit 255). The block form keeps the path whole.
• Docs: CUTOVER records the approval prompt and pause checks.

Live, with the user answering:

• feat: ask once per agent before it controls the Mac, and keep agent input off Desktop Tools' own UI (#24) #120: both checks pass. perl is refused, and focus is refused while its prompt is up. Before the fix, the second check failed ("focus while the prompt was open outcome completed").
• Pause: while paused, desktop_windows and desktop_inspect work, and desktop_type is refused with the pause message. After resume, it completes.

swift test --filter CoreTests passes, and the release build has no warnings.