Define the operating rules.
- A named process owner and clear outcomes.
- Scoped access to the data and tools each agent needs.
- Explicit action permissions, budget limits, and approval thresholds.
- Rules for retention, sensitive information, and external communication.