One confirmation dialog for every destructive action — async pending, inline failure and type-to-confirm.