Principle of least privilege

Knowledge graph concept · also referred to as least privilege, low-trust mode, only permissions it needs, give my agent access to push to this repo for 24 hours, principle of the least privilege, fine-grained policies, read scopes, repo.write, read access, allowlist

Mentioned in

• Brokerkit Makes Agent Access Explicit X thread · 2026-07-22
• Secure Agent Access With Brokerkit X thread · 2026-07-16
• Don't give agents destructive credentials X thread · 2026-07-14
• Safe Hugging Face Access For Agents X thread · 2026-07-05
• MCP vs CLI X thread · 2026-03-24
• GitHub needs first-class support for working with agents X thread · 2026-03-04
• Responsible engineering in agent workflows X thread · 2026-01-22
• GitHub's trust model breaks under AI-generated code X thread · 2026-01-17
• GitHub has to change log · 2026-01-17

Related concepts

• GitHub access control 7
• AI agent security 5
• Human-in-the-loop approval 5
• Prompt injection 4
• Pull request 4
• Sandboxing 4
• AI coding agent 3
• Credential broker 3