Control: confirmations, sandboxes, observability

An uncontrolled production agent is a landmine. We build the safety system: autonomy levels (reads → drafts → acts with confirmation → acts alone), sandboxes, per-decision logs, a kill switch — plus prompt-injection defence and the transparency duty from the EU AI Act.