Least privilege

Giving each part of the system only the permissions its job needs. For example, a status-only agent gets just get_order, and read-only tools use a connection that can't write.