The Tool Execution Envelope: How Agents Act Safely on Real Systems

Every agent action should pass through an envelope of checks that the model cannot bypass: schema validation, authorisation as the user, risk classification, approval where needed, idempotent execution and result validation, all logged. This guide walks through each layer, what it prevents, and how a PM decides which actions need which controls.