Unverified50% confidenceDecision RuleExact time
Capability Narrowing requires: when Agent A delegates a subtask to Agent B, the permission scope B receives must be a subset of the permissions A currently holds, not a union or a superset.
1
Sources
50%
Confidence
Long-term
Relevance
10/14/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedThe Principle of Least Privilege is more difficult to enforce in Agent systems because the Agent's behavioral paths are difficult to predict.69% similarUnverifiedAgent permission delegation should follow the principle of progressive narrowing, where each delegation should be a subset rather than a superset of permissions and should never be inherited by default.69% similarUnverifiedA reliable Agent implementation should set a call limit and clear exit conditions, and should adapt or stop and seek human intervention when encountering timeouts, empty data, or insufficient permissions.68% similarUnverifiedThe trade-off of local Agents lies in exchanging privacy, controllability, and offline capability for slower speed and a limited upper bound on model capability.67% similarUnverified应赋予Agent最小权限，如只需读取日志的Agent不应拥有写入数据库能力，权限边界越清晰失控破坏范围越可控67% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1026409API
curl https://kongchang.com/api/v1/knowledge/claims/1026409MCP
get_claim(id=1026409)