Least-Privilege Agent

A least-privilege agent is granted only the minimum tool permissions and data access required for its current task, and nothing more. By narrowing the action space, this design limits the blast radius if the agent is compromised, confused, or manipulated by a prompt injection. Permissions are scoped per task rather than granted broadly, so a misbehaving agent cannot reach resources outside its intended boundary.