Unverified50% confidenceDecision RuleExact time

一个负责回复邮件的Agent不应拥有删除数据库的权限，通过限制工具访问范围可将出错破坏压缩到最小

1

Sources

50%

Confidence

Long-term

Relevance

7/16/2026

First Seen

Sources

Core Iron Rules for Deploying AI Agents in Production

Related Claims

Unverified在Agent代替用户操作敏感账户场景下，仅需读取数据的Agent其令牌Scope应被限定为只读权限67% similar UnverifiedUsers should never send sensitive information such as passwords or ID photos when replying to automated emails, as legitimate organizations do not request such information via email replies.66% similar

Cite This Claim

Stable URI

https://kongchang.com/claim/529577

API

curl https://kongchang.com/api/v1/knowledge/claims/529577

MCP

get_claim(id=529577)