Read-only planning mode. The agent gathers context and proposes a plan but cannot execute destructive actions.