Read-only audit of what your bots can do without your yes: flags every spend, delete, send, post or password path and proposes the exact fix text.