(OP here) I decided to let the AI coder write directly to the file system without human approval - to accelerate the process, but built a Python-based snapshot mechanism to make it safe to be able to revert the changes. Happy to answer any questions about diff/restore implementation.