Every run is bound by the scope you sign.
Full Rules of Engagement documentation - scope boundaries, operator approval gates, and what agents are never permitted to do - is provided during onboarding, before any agent touches your environment. Want to see a real one?