“prompting the user” has been discussed before. its been stated that its not gonna be in sponge itself, but i never said we can’t do it ourselves. i actually said that in that post too; but no matter how trusted a person is, we still can’t just -assume- the file would be safe even with all the safechecks. of course, that problem is left up to whoever creates that system.