Operational guidelines: terse responses, sequential execution, no destructive ops without confirmation