A code-level guide to all ten OWASP Agentic Top 10 risks (ASI01–ASI10), with concrete mitigations: scoped credentials, per-tool permission policies, sandboxed code execution, and the action-boundary model.