sn execute in v0.6 is the v0.5 runner wrapped in two new gates — preflight (validation) and preview (complexity + human review). In TTY mode both are default-on so you can't ship a half-checked manifest. --ci or a non-TTY context turns them off for deterministic automation; --yes explicitly accepts the preview gate without TTY interaction. Everything downstream — validate, drift, state — reads from the execute snapshot, so the loop never leaves your local .sn-*/ directories unless you ask it to.