Agent Safety

> Agent safety is defense in depth across untrusted input handling, least-privilege capabilities, per-call authorization, approval, sandboxing, budgets, monitoring, containment, and recovery. A toy risk score can demonstrate routing arithmetic; it cannot grant permission or prove an action safe.