A department needs a bounded workflow with a few approved tools. Which design principle is appropriate?

1. Let each generated response redefine its own permissions
2. Give the agent every connector available in the tenant
3. Treat more tools as automatic proof of better quality
4. Define the goal, tool boundaries, expected inputs and outputs, and failure handling