You're designing a tool for an agent that may run unattended. The tool issues refunds. Which combination of annotations and design choices best protects against misuse?