Verify VoiceOS confirmation Cancel from main.log (approved=false)

To prove a VoiceOS confirmation card's Cancel works without watching the screen, grep ~/Library/Logs/VoiceOS/main.log. Manifest 'card' confirmations log [NotchState] CONFIRM_REQUIRED { confirmationId: '<uuid>' } when shown, then [IPC] agent-confirm-response: id=<uuid> approved=false hasEdits=false when the user cancels. Check that no Executing custom MCP tool: <server>/<write tool> follows. Older or widget flows log pendingConfirmation: '<uuid>' in NotchState state dumps instead. A watcher keyed only on that pattern misses card confirmations, so match both.