AI coding tools can move fast and inherit broad access to your code, secrets, and terminal. Use this checklist to restrict tools, vet packages, review generated code, and require human approval before release.