Dec 2025Safe by Default: Building Agents That Can't Wreck Your DataRead/write enforcement, principal scoping, approval gates, sandboxes and budgets: five safety properties, every one enforced in code, not in a prompt.Agent Harness03