diff --git a/plugins/pgedge/skills/pgedge-byoc/SKILL.md b/plugins/pgedge/skills/pgedge-byoc/SKILL.md
index 7d129bd..9ed3855 100644
--- a/plugins/pgedge/skills/pgedge-byoc/SKILL.md
+++ b/plugins/pgedge/skills/pgedge-byoc/SKILL.md
@@ -108,9 +108,11 @@ Each rule is stated in full on the page named beside it.
 - **Run writes one at a time.** A database accepts one change at a
   time, so deploy services one by one, each with `--wait`. See the
   index's "Resource status".
-- **Pass `--force` only when the user asked for an unattended run.**
-  Eleven verbs prompt, four of them not spelled `delete`. See the
-  index's "Destructive operations".
+- **A request that names the action and its target is consent: pass
+  `--force`.** That consent covers the named action only, so ask
+  before any other destructive step it turns out to need. Eleven verbs
+  prompt, four of them not spelled `delete`. See the index's
+  "Destructive operations".
 - **An empty list proves nothing about entitlement.** Some verbs are
   plan-gated and some answer an empty array on any plan. See the
   index's "Plan entitlement".
diff --git a/plugins/pgedge/skills/pgedge-controlplane/SKILL.md b/plugins/pgedge/skills/pgedge-controlplane/SKILL.md
index 873da85..201ea11 100644
--- a/plugins/pgedge/skills/pgedge-controlplane/SKILL.md
+++ b/plugins/pgedge/skills/pgedge-controlplane/SKILL.md
@@ -106,7 +106,9 @@ Each rule is stated in full on the page named beside it.
 - **`--force` only skips the confirmation prompt.** A server-side
   waiver is its own flag, `--force-unmodifiable`, or `--force-lost` on
   `host remove`. See `database`, `database instance`, `database node`
-  and `host`.
+  and `host`. A request that names the action and its target is
+  consent for `--force`, and for that action only: ask before a
+  waiver flag or any other destructive step it turns out to need.
 - **Start every database from `database init`.** When it can reach a
   systemd Control Plane, it fills in the distinct ports each node
   needs. The CLI refuses a spec that still carries a `CHANGE-ME`
diff --git a/plugins/pgedge/skills/pgedge-managed/SKILL.md b/plugins/pgedge/skills/pgedge-managed/SKILL.md
index 418832a..e2828e4 100644
--- a/plugins/pgedge/skills/pgedge-managed/SKILL.md
+++ b/plugins/pgedge/skills/pgedge-managed/SKILL.md
@@ -116,8 +116,10 @@ Each rule is stated in full on the page named beside it.
   list` before you choose a value.
 - **`--force` only skips the confirmation prompt.** It never deletes
   branches: `--delete-branches` does that, and branch data cannot be
-  recovered. Pass `--force` only when the user asked for an unattended
-  run.
+  recovered. A request that names the action and its target is
+  consent, so pass `--force`. That consent covers the named action
+  only: ask before any other destructive step it turns out to need,
+  such as deleting branches.
 - **Keep credentials out of the transcript.** Pass `--no-password` to
   `database connection-string` whenever the output is shown to a
   person. Otherwise write the output to a file or a variable, never to