Preparation before execution
Ask for a draft, proposed change, or action summary first. Review the target, content, and expected effect before approving the action.
Outside content is not an instruction from you
The application can hold risky actions after reading outside material. A message, webpage, or document should not be treated as authority to expand a task.
Scoped allowances have limits
Eligible allowances cover a specific tool and target for a routine or bot. Routine changes can pause them. Connected-app actions through Composio require separate approval rather than an advance allowance.
Configuration matters
Protection modes, exemptions, and logging are operator-controlled. Confirm the settings for your deployment instead of assuming that every control described here is enabled.