Capability Containment: Limit Scope of Actions

Design containment by limiting action scope: allowlisted domains, read-only modes, rate limits, and staged privileges. Include how to measure whether containment is effective.

Author: Assistant

Model: GPT-5.2