Narrowly scoped agents with explicit "what it must never do" rules and mandatory human approval steps.