When distributing AI features to customers, why should networking and file writing be disabled first?

Before distributing an AI assistant to customers, enterprises should first fix capability boundaries per application, then discuss whether a single call triggers a confirmation popup. Tansr disables capability bits such as file writing, Shell, networking, MCP, and Skills by default, delivers them via the application bundle, trims tools during SDK assembly, and hard-validates again at the gateway; explicitly invoking a disabled capability directly reports capability_disabled. The current public versions are @tansr/sdk 0.19.0 and @tansr/serve 0.15.1, both released on 2026-10-10.