ProblemThe documented gaps (no audit log, no spend cap, no dry run, an account-wide credential boundary, mandatory cloud storage) all bite hardest on the same few systems.
TechniqueDo not connect payment systems and password managers, production databases and destructive-permission accounts, customer messaging with send rights, regulated or client-confidential stores, or anything you would not put in a document you might accidentally share publicly.
Why it worksEach exclusion maps to a specific missing control rather than to general caution.
When to useThe whole beta period.