Propose a setpoint change — a recommendation, never a write

The queue

Three guards, each checked on its own: the tag manifest must declare the tag writable with bounds; the API checks the bounds again at approval; the OPC agent refuses anything outside its own copy of the bounds at the moment of writing. After the write the process value is read back and the outcome recorded - written and not followed is a finding, not a success.