AI suggestions with human authority: bounded candidates, transactional confirmation and recovery