%20scale(.8)'%3e%3cpath%20d='M116.770%2049.147A48%2048%200%201%200%20116.770%20110.853'%20fill='none'%20stroke='%2316263D'%20stroke-width='27.5'%20stroke-linecap='round'/%3e%3cpath%20d='M138.5%2080%20A10.5%2010.5%200%201%200%20117.5%2080%20A10.5%2010.5%200%201%200%20138.5%2080%20Z'%20fill='%23F06D5E'/%3e%3c/g%3e%3cg%20fill='%233D8B83'%20stroke='%233D8B83'%20stroke-linecap='round'%20stroke-linejoin='round'%3e%3cpath%20d='M445.5%20132%20A7.5%207.5%200%201%200%20430.5%20132%20A7.5%207.5%200%201%200%20445.5%20132%20Z'%20stroke='none'/%3e%3cpath%20d='M511.5%20110A25.5%2025.5%200%201%201%20486%2084.5A25.5%2025.5%200%200%201%20511.5%20110V135.5'%20fill='none'%20stroke-width='14'/%3e%3cpath%20d='M552%2091V135.5'%20fill='none'%20stroke-width='14'/%3e%3cpath%20d='M559.5%2068%20A7.5%207.5%200%201%200%20544.5%2068%20A7.5%207.5%200%201%200%20559.5%2068%20Z'%20stroke='none'/%3e%3c/g%3e%3c/svg%3e)
5. Safe Execution Principles
5.1 Automate action, not judgment
| Action | Default handling |
|---|---|
| Search and summarize | May run automatically |
| Compare schedule candidates | Run, then explain |
| Build a cart | Run, confirm before payment |
| Free booking | Prior consent or final confirmation by policy |
| Paid booking, order, or payment | Present amount and terms, then confirm |
| Transfer health information | Explicit consent to recipient, purpose, and fields |
| Contract, loan, or investment | Never auto-finalize |
| Password or OTP | Only on user device or official authentication surface |
5.2 Prefer official connections
IROA prefers published APIs, institutional standards, MCP tools, Apple App Intents, Android AppFunctions, and other official capabilities. When screen execution is unavoidable, it uses an isolated per-request environment, allowlisted domains and actions, separate user confirmation for consequential steps, no central password or payment-key storage, independent outcome checks, and immediate stop or human handoff on failure.
5.3 Respect mobile-platform limits
Mobile operating systems restrict arbitrary cross-app control. IROA uses official deep links, APIs, intents, shortcuts, allowed system features, and safe web flows first, then moves the request to a secure execution space with approval. Experimental platform capabilities are not treated as launch dependencies.
5.4 Explain and cancel
Users can ask what is happening, why an option was selected, which data goes to whom, whether cost occurs, whether the action can stop or reverse, and whether a person can check it. Explanations use plain language appropriate to the user.