Guardrails for workplace agents

Treat every tool call as an audited event with actor, intent, and outcome.

Prefer propose-then-approve for payroll, compensation, and terminations.

Scope data to the signed-in worker unless the role is explicitly managerial.