An agent’s job isn’t known until it runs, so a role assigned in advance is always too much or too little. Give the agent a task instead, and every call it makes gets checked against that intent, whether it’s reading a Linear issue or emailing a distribution list.
With WorkOS Airlock, you set the policies once. Each call is allowed, denied, or sent to a human for approval, and every verdict is logged.