Set permissions, approvals, tenant boundaries, spend controls, and autonomy guardrails before agents act. Inspect the record and reverse course when needed.