We trust you've had the lecture about root credentials and agents.

Treat anything granted access as potentially compromised.

Compartmentalise authority and limit blast radius.

Preserve independent audit, recovery, and human accountability.