Passive intents only · Out-of-scope requests are refused, not attempted
The brain only chooses an action from a fixed, passive-only set. Execution runs through the same validated engine code as the manual pages — it cannot log in, submit forms, or touch anything private.
Passive intents only · Out-of-scope requests are refused, not attempted