name	tool-boundary
description	Define least-privilege tool access and confirmation boundaries for Ventura Agents II specialists connected to operational systems. Use when an agent gains infrastructure security supply pricing ecommerce or customer-system actions. Do not use when the agent remains prompt-only with no external action capability.

Tool boundary

List each connected tool and the exact reads and writes required by the specialist workflow.
Default to read-only permissions.
Require confirmation for destructive security financial infrastructure personnel or irreversible actions unless an approved policy explicitly governs them.
Keep authentication authorization and validation in the tool layer.
Log material external actions for audit.
Remove permissions that are not required by the agent's declared function.

name	tool-boundary
description	Define least-privilege tool access and confirmation boundaries for Ventura Agents II specialists connected to operational systems. Use when an agent gains infrastructure security supply pricing ecommerce or customer-system actions. Do not use when the agent remains prompt-only with no external action capability.

List each connected tool and the exact reads and writes required by the specialist workflow.
Default to read-only permissions.
Require confirmation for destructive security financial infrastructure personnel or irreversible actions unless an approved policy explicitly governs them.
Keep authentication authorization and validation in the tool layer.
Log material external actions for audit.
Remove permissions that are not required by the agent's declared function.

tool-boundary