Complete procedures with a way back.

Build a local-first analytics assistant that discovers only curated PostgreSQL views, asks OpenAI for a structured SELECT proposal, validates a conservative SQL subset, requires a human to approve the exact query, enforces a restricted database role and read-only transaction, limits time and rows, and emits local table or chart JSON.

Build a tenant-isolated Microsoft Teams assistant on the current Microsoft 365 Agents SDK with CloudAdapter JWT authentication, Microsoft Entra ID workload identity, durable activity idempotency, bounded read-only answers, Adaptive Card Action.Execute approvals, distinct app and user authorization, explicit admin-consent and resource-specific consent review, a separate dispatcher, and zero-downtime deployment.

Create a production-oriented GitHub App that verifies webhook signatures, deduplicates deliveries, obtains short-lived installation authentication, proposes labels and duplicate candidates, and requires a named human to approve every external label write.

Build a single-mailbox production reference that incrementally reads Gmail, classifies untrusted messages, treats attachments as quarantined metadata, prepares bounded reply proposals, and creates—but never sends—a Gmail draft only after an identified reviewer approves the exact proposal.

Build a support agent that uses strict Claude tool schemas, validates every tool request again in application code, executes independent read-only calls safely, pauses writes for human approval, returns correctly ordered tool results, and recovers from refusals, timeouts, and partial failures.

Build a bounded Responses API agent whose strict function calls are treated as proposals, whose deterministic state and policy select eligible tools, whose consequential actions require exact human approval, and whose adapters use durable idempotency, effect-aware retries, deadlines, safe outputs, correlated audit and full-bundle rollback.