Part 3[link] built the harness around the agent.
Retry and fallback kept one provider error from ending a run. A model router picked the model, and hard limits capped model and tool calls. Guardrails redacted PII, fenced injected instructions, and screened the request with Jev.
A permission matrix enforced roles at the tool boundary, and an approval interrup...