Applied AI·Agents
you give the agent read-only tools by default and a scoped credential, because whatever its tools can reach is the blast radius.
Least privilege for tools
Draft summary, pending review
Granting the minimum capability each task needs: read-only tools by default, scoped credentials, no broad filesystem or network access without cause. The blast radius of a compromised or confused agent equals whatever its tools can reach.