Exploring AccessPolicy to constrain what AI agents are allowed to do when they have access to tools, private data, and external systems.