External action-authorization boundary for LLM agents | saasbrowser.ai