Notice what those rules have in common.
None of them make the agent dumber. None of them make it slower. Every one of them lets me say yes to more.
More agents, more tasks, more connections, because I know exactly what's on the other side of the fence. The credentials never reach the agent.
The rules aren't AI deciding what's reasonable. They're deterministic.
Either it's inside the fence or it isn't. And every action gets logged, so I can see what happened without reading every message, I see what the agent sees, not what it tells me it saw. Or guessing what it’s doing behind “reading your emails.”