Safety gating

What the agent is allowed to do and when.

Quote vs execution

• Quotes are low risk.

• Execution is high risk.

Pre-execution checks

• slippage limit

• chain/token allowlists

• engine health gates

• suspicious amount heuristics

Session security

• Do not store secrets in session history.

• Keep tool traces sanitized.