Microsoft Reactor

So far the agent can talk about markets but cannot touch anything of yours, and nothing stops it doing something it should not. This episode fixes both. We give it file access so it reads a real portfolio.csv and writes its reports back to disk, then put a place_trade tool behind an explicit human approval.

Approving every single read gets old fast, so we add auto-approval rules for the safe calls and one custom rule that clears small trades on its own. We finish with durable memory in two forms, the files the agent curates itself and the facts Foundry extracts automatically, and watch both survive a restart.