Least privilege

Giving tools only the access they need: read-only by default, scoped to the signed-in customer in code, with writes behind confirmation.