AI Agent Workspace Architecture: Give Agents Files, Tools, and Limits

Design an AI agent workspace with files, tools, permissions, state, traces, and review gates so agents can do real work without unsafe access or runaway cost.