Leadership

Tool permissions and scopes

• Auditing a Manifest Change: What an Agent May Do Differently
• Authority Levels for Human and Agent Work: A Table You Can Paste
• How to Write a Tool Permission Manifest for an Agent
• Scoping an Agent's Tools: Read, Write and Destructive
• Separating Data from Commands in a Tool Call
• Tool Arguments as an Attack Surface: Validating What Agents Pass
• Designing Narrow Tool Interfaces for Agents
• Manifest Review in CI: Blocking Merges When Reach Widens
• Mapping Network Egress for Agent Tool Calls
• Rate Limits and Timeouts for Agent Tools: A Default Profile
• Read-Only First: Rolling Out a New Agent Tool Safely
• Rotating Tool Credentials: Scope, Storage and Revocation
• Shadowing a Proposed Tool Change Against Recorded Traces
• Shared Tools Across Agents: A Routing Policy
• Splitting Read and Write Permissions in an Agent's Toolset
• Testing Tool Scopes in a Sandbox Agent
• Untrusted Retrieval: Sanitizing RAG Chunks Before the Model
• Versioning a Tool Permission Manifest: Diffs and Rollbacks
• What the Model Sees: A Context Manifest for Every Agent Run
• Who Owns a Tool: A Register of Owners, Scopes and Expiry