See the boundary work
A short walkthrough of pre-execution authorization for agents: normal request, scoped permit, injected escalation, and denial before action.
Identify where agents touch real systems.
Show permits and denials before execution.
Test prompt injection without giving it authority.