Function accept 

pub fn accept(
    vault: &Path,
    pp: &Passphrase,
    year: i32,
    only: Option<&str>,
    attestation: Option<&str>,
    now: OffsetDateTime,
) -> Result<AcceptOutcome, CliError>

optimize accept — apply the recomputed optimum, gated per disposal (§C.2 / §1.1012-1(j)).

only: if Some(disposal), restrict to that one disposal (the form that carries --attest). attestation: the user’s narrow contemporaneous-ID statement, REQUIRED to persist an already-executed disposal; the app NEVER fabricates it and refuses to persist a post-hoc selection without it. A bare accept (no --attest) persists only genuinely-contemporaneous picks; it remains what-if for already-executed ones. now is the CLI clock seam → the proposed picks’ made-date (core stays clock-free; the persisted decision is judged against the REAL made-date).