Least privilege
Also known as: principle of least privilege
Least privilege means a model or agent gets only the tools, data, and permissions its task truly needs — no more.
- An agent that reads docs doesn’t need write access to prod.
- A summarizer doesn’t need your email or your wallet.
- Smaller blast radius if something goes wrong.
The #1 habit: of every AI security measure, least privilege pays off the most. Scope down by default; grant up only when a task genuinely requires it.