tool-boundary

name	tool-boundary
description	Define least-privilege tool access and confirmation boundaries for Ventura Agents II specialists connected to operational systems. Use when an agent gains infrastructure security supply pricing ecommerce or customer-system actions. Do not use when the agent remains prompt-only with no external action capability.

Tool boundary

• List each connected tool and the exact reads and writes required by the specialist workflow.
• Default to read-only permissions.
• Require confirmation for destructive security financial infrastructure personnel or irreversible actions unless an approved policy explicitly governs them.
• Keep authentication authorization and validation in the tool layer.
• Log material external actions for audit.
• Remove permissions that are not required by the agent's declared function.