Define What the Agent May Change
List data it can read, code it can edit, records it can write and actions requiring approval. Separate proposing a new strategy from activating it. Model-selected tools do not imply unrestricted or reliable control of an account.