Let agents select media IDs, never media URLs
When an autonomous agent may send media, expose only a small enum of reviewed asset IDs in model output. Resolve the chosen ID server-side to an immutable, step-scoped, same-origin HTTPS asset; keep recipient, provider, and URL authority outside the model. Persist the stable ID f…