#permissions
9 articles
Coding Agents Need a Constitution of Permissions
Giving an agent more repository access can improve its completion rate while making the surrounding organization less safe. The answer is a legible permission system built around consequences, not another layer of prompt advice.
An AI Agent’s Most Important Interface Is the Permission Boundary
The central design problem for workplace agents is not how much they can do, but how clearly they negotiate authority. Products that make actions inspectable, reversible, and narrowly scoped will earn more autonomy over time.
Give the Agent a Smaller Keyring: Autonomy Should Be Designed Around Reversibility
The useful question is not whether an AI agent is autonomous. It is which actions it can take, which states it can alter and how cheaply a human can reverse the result.
The Best AI Agent Interface Is a Well-Placed Gate
Agent products are racing to remove friction, but consequential automation needs deliberate pauses. The strongest interfaces distinguish harmless exploration from actions that spend money, alter records, or speak for a person.
Stop Designing Coding Agents as Chatbots With Shell Access
A production coding agent is not primarily a conversational interface. It is a controlled operator whose real product surface consists of permissions, evidence, recovery, and handoff.
Stop Hiring AI Agents. Start Designing Their Jurisdiction.
An agent’s job description matters less than the boundaries around its tools, approvals, and responsibility. Teams should organize autonomous software around jurisdiction: what it may observe, change, spend, and commit.
Stop Giving Agents Job Titles; Give Them Permission Boundaries
Calling an AI system a “researcher” or “operations manager” hides the decisions that determine whether it is safe to deploy. Production agents need explicit authority, budgets, and reversible actions—not anthropomorphic roles.
Give Coding Agents a Budget of Authority, Not a Longer Prompt
The safest useful coding agent is not the one with the most elaborate instructions. It is the one whose permissions, evidence requirements and rollback paths make good behavior easier than improvisation.
Give AI Agents a Failure Budget, Not a Blank Check
Agent autonomy should be designed as a limited operational resource. The safest and most useful systems expand authority according to reversibility, evidence, and accumulated risk—not a single approval dialog.