Safety and permissions

Gate each tool behind an explicit policy so a prompt cannot grant itself shell access.

Sign in to read this stage. The first two stages are free.