Limit the Blast Radius of Autonomous Agents

An autonomous agent should not inherit unlimited access simply because it can use many tools. Separate identities, scopes, budgets, environments, and approval gates so one mistake cannot become a system-wide incident.

Sources

See the primary sources linked in the Chinese edition.