Write the policy that decides what your agent can read, what it can propose, and what it can never do alone.