Remove toggle_confirmation; require explicit state change