The most dangerous button in a creative tool is not "delete." It is the recovery dialog that appears when something is already wrong: "We couldn't load your project — start fresh?" One click, and the file that failed to parse at 23:40 is gone at 23:41, together with the chapter it contained. The tool was trying to help. Local-first software cannot afford that. There is no server copy, no support ticket that restores yesterday's state, no account trash bin. When your app is the only place a ...