Our PMs' prototypes install whatever packages the coding agent suggests. Security wants to ban PM prototyping. What do you propose instead?

Make your call first. Use the published answer and rubric to examine your reasoning when you are ready.