Instead, the safer model is “delegation by constraint.” This means limiting what an agent can do — such as restricting specific tokens, transaction sizes, or time windows. Much like setting a credit limit, these boundaries ensure the agent can act efficiently without exposing users to unnecessary risk.