Minimize the likelihood of executing an action beyond granted permissions during account operations.

Permission-tier compliance does not generalize beyond the prompt shape this model was trained on. In testing: when a request was natively marked as permission-denied, the model correctly refused in 40 of 40 cases. When the caller's access tier was lowered by one step — a single word changed, with the request and tool list otherwise identical — the model named the out-of-tier tool in 40 of 40 cases. In-tier control requests were handled correctly in 40 of 40 cases. This is a known limitation of the current version and is the top priority for the next training cycle. Do not deploy this model as a permission boundary; permission enforcement must be implemented in your runtime, not delegated to the model.