Reel · AI Agents · Oct 25, 2026
Why an agent with deploy access is an intern with root
In short
Giving an AI agent deploy access is like giving an intern root. The rule: give the agent only what it can burn, not what it can burn down. Before you hand it a tool, ask how much damage that tool can do. That's your blast radius.
Label from the original post: composite scenario, SRE notes
Checklist: what to do about it
- List every tool and credential each agent holds today.
- For each one, write down the worst thing it could do. That's the blast radius.
- Remove anything the agent's one job doesn't need (least privilege).
- Put a spend, token and step budget on every agent run.
- Require human approval for anything that writes, sends, deploys or deletes.
- Scope credentials to one environment (staging first) and make them short-lived.
- Log every tool call and decision so you can reconstruct what happened.
- Run a game day: fail a tool call and check the agent stops instead of guessing.