Before an agent writes to a System of Record, ask it to validate in test mode (TESTRUN='X'). The system returns messages; this kernel turns them into a deterministic decision: block on any error (the real write would corrupt), stage for human review on warnings, allow when clean. It's the pre-execution complement to the ledger verify.
Honest scope. A deterministic, signable governance primitive in the kernel family — the pre-execution gate that pairs with the post-execution verifying-ledger close-out, and the validation step of the Auth·Clear·Settle Auth phase. The TESTRUN call itself is the connector's; this kernel only decides on its result. It runs no transaction. Source: flowdesk-preflight-kernel.js.