Unverified50% confidenceSolutionExact time
The tools available to an agent should be strictly limited to only the functionality it truly needs (least-privilege tool invocation).
1
Sources
50%
Confidence
Long-term
Relevance
10/7/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedThe principle of least privilege requires that each task be assigned exactly the permissions needed during the agent design phase, rather than opening up a broad set of capabilities.74% similarUnverifiedAgentOS 采用最小权限原则限制每个智能体能做什么，从基础设施层面限制模型输出可能造成的损害70% similarVerified最小权限原则要求任何程序或用户只拥有完成当前任务所必需的最低权限69% similarUnverifiedAgents should be granted minimal privileges—for example, an agent that only needs to read logs should not have the ability to write to the database—and the clearer the permission boundaries, the more controllable the scope of damage in the event of a loss of control69% similarUnverifiedA reliable Agent implementation should set a call limit and clear exit conditions, and should adapt or stop and seek human intervention when encountering timeouts, empty data, or insufficient permissions.68% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/983759API
curl https://kongchang.com/api/v1/knowledge/claims/983759MCP
get_claim(id=983759)