Module 15 · Chapter 9: Permission gates and secrets
Permissions as narrow as the task
In short
Write three lists: allow, ask, deny; anything unlisted is refused. Limit the environment too: variables set explicitly, dangerous defaults removed, and a hook refusing forbidden targets before a tool runs.
After this lesson you can
- Build an agent's permission rules from allow, ask and deny lists
- Limit the environment variables and data sources an agent can reach
Sign in to read this lesson
The title and summary are open to everyone. The full lesson is for signed-in learners.