Outbound
Constrain autonomous actions leaving the environment.
Apply customer-defined authority to supported destinations, tools, subprocesses, and host actions. A compromised or misdirected workload should not receive broader authority merely because it can move faster, create children, or coordinate with other agents.