A tier-1 customer-support agent built on Claude is given four tools: knowledge-base search, create-ticket, issue-refund, and delete-customer-account. Reviewing the deployment, you confirm that tier-1 staff are never authorized to delete accounts. Which change BEST reduces risk?