What was claimed, and what the evidence says.
Agent tool calls are restricted to an approved allow-list.
Source: Engineering handbook
High-value actions require explicit human sign-off.
Source: Operating procedure
Decision logs are immutable and time-stamped.
Source: Security whitepaper