Engagement control
Keep authorization, test identities, rate limits, exclusions, and escalation contacts attached to the work.
Reviewable evidence
Preserve enough detail for a qualified reviewer to understand what happened without treating agent output as self-validating.
Independent judgment
Use additional manual testing or specialist review when risk, regulation, architecture, or ambiguity requires it.