What the twelve questions cover
Three questions each on evaluation, permissions and tools, cost and limits, and operations. They ask whether a practice exists, such as an evaluation set that runs before each change, a confirmation step before irreversible actions, and a per-task cap.