Depth limits, accidental data deletion, irreversible actions: How do I restrict AI during autonomous exploration of an SUT for test generation?

Autonomous exploration is designed for test environments. Irreversible actions, accidental deletions, or access to systems outside the test environment must be controlled by the test environment itself — not by the AI agent. This applies equally to any AI agent. Depth limits can be specified in the test description and are generally respected in practice. However, there is currently no mechanism to technically enforce them. The agent can be stopped at any time if undesired behavior is observed during exploration.