Design an AI agent workspace with files, tools, permissions, state, traces, and review gates so agents can do real work without unsafe access or runaway cost.
