The line an agent, service, or user cannot cross — enforced through access controls, tool scopes, policy, or runtime checks.