[ Security & control ]
This is how an estimating team lets AI near the bid without giving it authority it should never have.
The mail connector refuses to release anything unless the request cites a recorded, approved decision.
Every extension, sum, reconciliation, and allowance uses deterministic integer-cent calculations.
Capability-scoped connectors hold credentials, enforce access, and write every allowed or denied request to the audit log.
Autonomy grows level by level — the approval gate never moves. What leaves your office is always something a person approved.