Checklist
AI tool + data permission checklist
A one-page check for every tool before an agent can use it: action, data scope, owner, logging, limits, approval and kill path.
- Who it is for
- Whoever connects a new tool or data source to an AI agent.
- How to use it
- Run it once for every tool before the integration ships.
- Format
- Checklist, PDF, 1 page.
What is inside
- Action, data scope, owner, logging and limits
- A final test: if the prompt is ignored, what can the agent still do?
Goes with the article The admin access trap: prompt injection is only half the problem.
Browse the research library