{{ ico.funnel }}Validate in, filter out
{{ ico.bookopen }}Ground and cite · no source, no claim
{{ ico.key }}Least privilege · only the wands it needs
{{ ico.users }}Human in the loop · spends, sends, refunds, deletes
{{ ico.checklist }}Audit every tool call
The model is never the last line of defence.