Overview Give the agent the tools required to act, but pair every powerful capability with an intentional permission level, visible execution, a way to revoke access, and a recovery path.