Only one agent in the pipeline ever holds a sending tool

ProblemEvery Bot in an outbound pipeline can technically reach every connector on the account.

TechniqueKeep research and qualification read-only, and give a sending tool to exactly one agent. Enforce with scoped credentials plus written boundaries, since the platform cannot enforce it.

Why it worksIt reduces the number of places an irreversible action can originate from many to one.

When to useOutbound, support, publishing.