CategorysafetyManual5.6Evidencedocumented
ProblemTeam defaults are permissive: network policy allows all, template sharing is on, Action Recording is off.
TechniqueOn day one set the network policy, the MCP allowlist, Team Rules, Auto Review team instructions, public template sharing, and, on Enterprise, Action Recording with export to your own collector. Remember there is no team-level ceiling on local execution.
Why it worksAny permitted connector is available to every Bot every member runs, so policy is the only lever that scales.
When to useBefore a team rollout.