A connector name hides the real action surface. A calendar integration might read events, create invitations, modify attendees, or delete meetings; those permissions require different safeguards.
The safest useful test environment contains realistic but fake records, reversible actions, planted prompt-injection attempts, permission traps, and complete logs.
Authorization determines whose data a remote connector can access and which actions it can perform. Teams need to understand the client, resource server, tokens, scopes, redirects, revocation, and account boundaries.
A long, confident research report can still rely on stale pages, circular citations, missing counterevidence, or sources that do not support the sentence beside them.
Coding agents can inspect files, run commands, change dependencies, and create commits. A useful evaluation measures correctness and the safety of the path taken.
A tool that handles plain paragraphs may fail on scanned pages, charts, handwriting, multi-column layouts, appendices, or exceptions hidden in footnotes.