@@ -81,7 +81,7 @@ function shellNote(info) {
 		'- Prefer the file tools for reading, searching, creating and editing: they are cheaper and reviewed as edits. Use run_command for what a shell does best: counting, sorting, de-duplicating, jq on JSON, bulk rename/move/delete, diffing two files, find with several conditions.',
 		'- You see at most 8000 characters of output (the start and the end), so keep commands narrow (head, grep -c, wc -l). A command is stopped at the user\'s time limit, after about '
 			+ (lim.commandCount || 100000) + ' commands or loop iterations, or when it reads a file over ' + (mib(lim.fileReadBytes) || 4) + ' MiB; exit 124 means time, 126 means a limit of this shell. '
-			+ 'Change the command; do not retry it unchanged. A stopped command changes nothing. head/tail size suffixes (K, M) are ignored: use plain numbers.',
+			+ 'Change the command; do not retry it unchanged. A command stopped while it runs changes nothing; one stopped while its file changes were being reviewed may have applied some of them (they are then in the Keep/Undo review), and its result says so. head/tail size suffixes (K, M) are ignored: use plain numbers.',
 		'- Regular expressions are RE2: no back-references and no lookahead (grep -P is not there; sed has no \\U \\L). Dates and times are UTC unless the command sets TZ. /tmp is empty at the start of every call and is not kept. '
 			+ 'The whole script is parsed before any of it runs, so a syntax error anywhere runs nothing. grep -r does not enter a folder named .git; there is one file time (find -atime/-ctime read the modification time).',
 		'- A command\'s file changes are applied only if it runs to its end, and then appear in the user\'s Keep/Undo review like your own edits. Commands change plain UTF-8 text files (up to 1 MiB, up to 300 files per command, line endings kept). '
 
@@ -201,18 +201,21 @@ const SHELL_API_VERSION = 1;
  *     the whole set and reviews it, or refuses it whole; it returns what the shell still has to do itself (make and
  *     remove directories), lines to append to the command's output, and how many changes it could NOT apply (the
  *     shell then does not report success). Without it the shell writes the changes straight to the workspace (the
- *     user's own terminal). `control.cancelled()` turns true when the run was stopped while the set was being
- *     checked: the caller then applies nothing (once the first write has begun nothing interrupts it).
+ *     user's own terminal). `control.cancelled()` turns true when the run is stopped (or the shell stops waiting for
+ *     the review): while the set is being checked the caller then applies nothing; once it is applying, what is already
+ *     in the review stays and nothing more is started (a change in flight is not interrupted).
  *
  * @typedef {object} ChildLike  The part of a Node ChildProcess that agent.js's runCommand uses.
  * @property {number} [pid]     leave undefined: agent.js then kills with child.kill(signal)
  * @property {{ on: (ev: 'data', cb: (chunk: string|Uint8Array) => void) => any }} stdout   strings (or Buffers)
  * @property {{ on: (ev: 'data', cb: (chunk: string|Uint8Array) => void) => any }} stderr
  * @property {(ev: 'close'|'error', cb: Function) => any} on   'close'(code) once, after every 'data'
  * @property {(signal?: string) => boolean} kill
- *     'SIGTERM' (Stop) and 'SIGKILL' (the timeout, or a Stop that was not heard within 1.5 s): the command is stopped
- *     and NONE of its file changes are applied — they were only ever staged — and the result says so. 'close' is
- *     emitted once. agent.js reports 130 for a stop and 124 for a timeout whatever the code of 'close'.
+ *     'SIGTERM' (Stop) and 'SIGKILL' (the timeout, or a Stop that was not heard within 1.5 s). A command that is still
+ *     running is stopped and NONE of its file changes are applied — they were only ever staged. One that has ended and
+ *     whose changes are being reviewed (`commit`) is settled at once, and what the review had applied stays in it. The
+ *     result says which. 'close' is emitted once. agent.js reports 130 for a stop and 124 for a timeout whatever the
+ *     code of 'close'.
  */
 
 /**
 
@@ -154,7 +154,10 @@ function ctxFor(over) {
 			assert.match(t.system, /run_command runs ONE command line in LevelCode Shell/);
 			assert.match(t.system, /Programs that exist: cat ls grep\. Shell builtins work too\. Everything else answers "command not found" \(exit 127\) — node, npm, git …/);
 			assert.match(t.system, /There is no network\. Nothing runs in the background/);
-			assert.match(t.system, /A stopped command changes nothing/);
+			// A Stop, or the time limit, while the command's changes are being reviewed settles the run at once, and what the
+			// review had applied stays in Keep/Undo (the shell's note says so): the prompt must not promise that nothing changed.
+			assert.ok(!/A stopped command changes nothing/.test(t.system), 'the prompt promises what a Stop during the review does not keep');
+			assert.match(t.system, /A command stopped while it runs changes nothing; one stopped while its file changes were being reviewed may have applied some of them \(they are then in the Keep\/Undo review\), and its result says so\./);
 			assert.match(t.system, /NONE of that command's changes are applied/);
 			assert.ok(!/dev servers|tail -f|There is no terminal|Run the extension unit tests/.test(t.system));
 		});