Safe tasks start read-only and only add write tools when the business action requires it.
Task definitions should be explicit about intent, allowed tools, and expected outcomes.
The task definition is the control surface for deterministic inbox automation.