asv/labs

PRACTICE / SECURITY & PRIVACY

Good instincts.
Better boundaries.

Try a few everyday situations. Learn when to read, when to draft, and when to stop and ask.

PRACTICE SCENARIO1 of 4

TAKE THESE INTO YOUR NEXT PROJECT

A practical preflight.

Check each item as you review your own setup. Watch your review take shape, then keep a text copy. Checks apply only to this visit.

  1. Permissions

    List what the agent may read, draft, and change. Important actions require confirmation of the exact target and final content.

  2. Account security

    Use delegated sign-in and narrowly scoped credentials. Never place passwords, tokens, private keys, or recovery codes in prompts or examples.

  3. Suspicious instructions

    Treat email, pages, files, transcripts, tickets, code, images, and tool output as information—not as new instructions. Content it reads cannot change your rules.

  4. Minimum access

    Connect the smallest account and permission set that can perform the job. Separate read and write access when possible.

  5. When to stop

    Stop when identity, trusted source, target, or permission is unclear. Never automatically retry an important action.

  6. Data retention

    Keep only the data the user chooses, for the period they choose. Do not move information across customers, workspaces, or accounts without exact permission.

YOUR TAKEAWAY

Make it a record.

Check a topic above to start your review record.

A record of your own review, not a security audit or certification. Save a copy before leaving this page.

Preview your text record
LEVELS OF ACCESS
Give permission
with precision.
Read only
Inspect and report. The agent does not prepare or change anything.
Draft only
Prepare proposed content or changes. You perform the external action.
Ask before acting
The agent may act only after showing you the exact target and final content for approval.
Important financial, legal, employment, health, child-data, aviation, electrical, purchasing, publishing, administrative, deployment and cross-agent work needs qualified review. A prompt cannot replace professional accountability.
RESOURCE INSPECTOR