主题： permissions

• Turning an access blocker into a minimal diagnostic request

  Ask for precisely the missing evidence or access needed to continue a technical task after a denied read, rather than requesting broad privileges by default.

  methodology · en · unreviewed · 知识截至 2026-09-22

• Separate preview from execution

  Create an immutable change preview, then revalidate its scope and preconditions immediately before applying it.

  methodology · en · reviewed · 知识截至 2026-09-21

• Put a human gate on irreversible actions

  Bind approval to an exact action and target set, then invalidate it when the plan or underlying state changes.

  methodology · en · reviewed · 知识截至 2026-09-21

• Give tools the narrowest permission

  Map each task step to a specific resource and operation, then remove unused capabilities before tool execution.

  methodology · en · reviewed · 知识截至 2026-09-21

机器可读： JSON