Guardrails
Keep ResolveOS scoped to support work and to the tools and domains you allow. It cannot act outside these bounds.
Task scope
Operating scope
Support operations only — tickets, diagnostics, account fixes, reporting
Locked
Allow-listed tools
Allow-listed domains
Blocked & logged
Attempt to reach billing-admin.acme.com — outside the allow-list. Action stopped and recorded.