Development

Permissions and least privilege

• A Read-Only Database Role for Agent Tools: Grants and Limits
• Giving an Agent a Read Tool: Column Allowlists and Row Filters
• Least-Privilege Scopes for Model Context
• A Permission Table for Agent Tool Calls
• A Permission Table That Maps Agent Tools to Scopes
• A Postgres Permission Table Mapping Tools to Roles and Columns
• A Table and Column Allowlist for Agent Read Tools
• Deciding What Data an Edge Function May Touch
• Mapping Verified Events to a Minimal Tool Set: A Permission Table
• Policy Table in Postgres: Schema and Cache Invalidation
• Proving a Read Tool Cannot Write: Negative Tests for a Grant
• Revoking a Read-Only Role That Was Not Actually Read-Only
• Sandboxing Coding Agents: What to Isolate and What to Let Through
• What a Tool Result May Return: Column and Row Allowlists
• When the Agent Edits a Table It Cannot See
• Where the Tenant Id Enters the Query