BYOD for AI ad-ops — give the agent a CSV, not your refresh token

TL;DR: mureo v0.7.1 (released 2026-04-29) lets an AI agent analyze your real Google Ads and Meta Ads accounts from a local XLSX. No OAuth, no developer token, no SaaS login. Mutation tools return {"status": "skipped_in_byod_readonly"} by construction. The agent can recommend a budget shift; it cannot execute one. Read-only by construction is the structural answer to the threat model I wrote up here . This post is the walkthrough. A couple of weeks ago I posted about the three failure modes of AI