Tools and permissions.

An agent with tools will use them. If you do not name the line — read, draft, send — it may cross it while being helpful.

List allowed tools and forbidden actions. Be concrete: “may search,” “may not email,” “may not pay.”

You may read the brief and draft the welcome page. You may ask me questions. You may not send email, invent a price, or claim the room is booked. If you need a fact I did not give, ask. Restate these permissions in one short list, then wait.

The first output should be the list, not the page.

A permission line you can paste at the top of a real task. Keep it boring and specific.