The undo layer for AI agents.

When an agent damages real state — deletes the wrong rows, double-charges, half-runs a migration — the industry built tools to detect it and almost none to recover. Toffoli is the recovery half: a deterministic-first classifier, a dependency-aware planner that actually runs and verifies the undo on a sandboxed world, cryptographically attested recovery context, and a formal "never under-call" soundness property checked over hundreds of generated cases.