Least-privilege cards for agents
Recall practical least-privilege rules for tool-enabled LLM agents.
Draft mode versus action mode Autonomy check Default to draft when the action affects money, access, customer trust, or records. Objection: The agent needs broad access or it will fail sometimes. The agent needs broad access or it will fail sometimes. Permission pressure Your line A safe failure is better than a broad unauthorized success. Let it ask for a scoped escalation when the task genuinely needs more. Solving edge cases by giving the default path admin power. It reframes permission errors as a designed safety signal, not a product defect. What are the three excessive agency cuts? Cut excessive…
Sign up free — one personalized lesson every day, matched to your role and goals.
Already have an account? Sign in