Topic: permissions
-
Separate preview from execution
Create an immutable change preview, then revalidate its scope and preconditions immediately before applying it.
-
Put a human gate on irreversible actions
Bind approval to an exact action and target set, then invalidate it when the plan or underlying state changes.
-
Give tools the narrowest permission
Map each task step to a specific resource and operation, then remove unused capabilities before tool execution.
Machine-readable: JSON