Unverified50% confidenceFactExact time
The agent operates entirely within the user's personal IAM permission boundary and cannot access data or execute commands that the user themselves is not authorized to access or execute.
1
Sources
50%
Confidence
Long-term
Relevance
10/8/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedIn this application design, the agent only has the same permissions as the logged-in user, meaning it can only perform operations that the currently logged-in user is allowed to perform.63% similarUnverified当Agent的工具集只包含读取、搜索、联网等能力而没有写入权限时，AI无法将文件写入磁盘61% similarUnverified不应在系统层面给予 AI 工具无限制的文件访问权或直接暴露整个用户主目录61% similarUnverifiedSub-agent invocations are one-shot calls that are dormant by default and strip credential variables from the environment, meaning keys already present in the shell will not be passed to child processes.61% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/988554API
curl https://kongchang.com/api/v1/knowledge/claims/988554MCP
get_claim(id=988554)