AI agent restrictions