What scopes should limit an AI agent's budget and actions?

Short answer

Limit agents with explicit scopes: allowed actions, resource selectors, spending or rate budgets, time expiry and revocation hooks. Require human approval for sensitive classes of action. Treat Ciright AI-authorization properties as related investigation seeds until verified, and never grant open-ended production authority by default.