An agent claims a patch is correct because its own explanation sounds convincing, but no checks ran. Which approach best fits?

1. Grant the narrowest required connector capabilities and project scope.
2. Persist operation identity and completion state outside ephemeral process memory.
3. Require observable build and test evidence appropriate to the change.
4. Validate arguments and avoid unsafe shell interpolation before execution.