notes: delete asks before it destroys

The confirm was on the second click, after the first had already removed the
file and the entry, so the 'Confirm?' label promised a check that had
already happened and one stray click lost the note. The first click now only
arms the button; the second removes and pushes the removal.

1 files changed, 4 insertions, 2 deletions

diff --git a/docs/superpowers/specs/2026-10-16-notes-design.md b/docs/superpowers/specs/2026-10-16-notes-design.md
index 53b9d2e..459b526 100644
--- a/docs/superpowers/specs/2026-10-16-notes-design.md
+++ b/docs/superpowers/specs/2026-10-16-notes-design.md
@@ -95,8 +95,10 @@ Opened by a row (existing note) or **New note**.
   the git half (see Git) and returns to the list. Leaving with the second click
   unmade keeps the saved note and does not push it. With git off there is no
   git half, so Save writes and returns to the list in one click.
-- **Cancel** returns to the list without saving; **Delete**, existing notes
-  only, is two clicks the same way and pushes the removal.
+- **Cancel** returns to the list without saving. **Delete**, existing notes
+  only, asks first: the first click arms the button, the second removes the
+  note and pushes the removal. Nothing is destroyed until the second click, a
+  note lost to one stray click being recoverable only out of git by hand.
 - **Unsaved text is discarded.** Leaving the editor with Cancel, the page's own
   back arrow, Escape or a click outside the drawer drops whatever was typed and
   not saved. `Page` has no veto over a back, and a drawer that destroys its page