AI Agents, Engineered

Home / Figures / Chapter 17

Figure 17.4: Three dials, one knob

An agent works inside a sandbox holding only one scoped key instead of the account-wide keyring, and passes its few consequential actions through a hatch to a human for approval.
Figure 17.4 Three dials, one knob. The deputy works inside thick walls (a sandbox), holds only the key the errand needs (least privilege), and passes the few consequential actions through a hatch to a human (approval). The blast radius is capped by architecture, not by trust.