A practical control model for prompt injection, tool abuse, output validation, and human approval in live AI workflows.