1. Declare authority boundaries.
2. AI defaults to no action.
3. Actions are logged.
4. Undo is immediate.