Host-driven pending round trip on the unified composer: submit sets `pending`, the send affordance blocks, then the host clears it. `autonomy: "confirm"` is host-declared; the default remains `suggest`.