Default Deny
A foundational principle in cybersecurity whereby a system refuses all access requests by default, permitting only explicitly authorized operations. When applied to AI agent design, the principle is used to prevent autonomous AI systems from executing potentially harmful actions in the absence of human oversight.
Timeline (last 90 days)
The 'default deny' principle is regarded in the security field as highly secure, but the cost is low flexibility and configuration cost shifted to the front.
The fail-safe or fail-closed principle means that when the system cannot determine whether an operation is reversible, it classifies it as irreversible and thereby blocks the Agent from executing it, a strategy widely adopted in security-sensitive systems.
Hermes Agent OS adopts a default-deny approval gate design: the AI cannot access private files unless the user manually approves, and actions such as sending emails externally or publishing content require human clearance.
Default Deny is a classic principle in cybersecurity where the system starts by rejecting all access requests, and only explicitly authorized operations are permitted.
All Facts (4)
The 'default deny' principle is regarded in the security field as highly secure, but the cost is low flexibility and configuration cost shifted to the front.
50%UnverifiedThe fail-safe or fail-closed principle means that when the system cannot determine whether an operation is reversible, it classifies it as irreversible and thereby blocks the Agent from executing it, a strategy widely adopted in security-sensitive systems.
50%UnverifiedHermes Agent OS adopts a default-deny approval gate design: the AI cannot access private files unless the user manually approves, and actions such as sending emails externally or publishing content require human clearance.
50%UnverifiedDefault Deny is a classic principle in cybersecurity where the system starts by rejecting all access requests, and only explicitly authorized operations are permitted.
50%