Mission 8 · Build the boundaries
Give it fewer hands
Choose the least power needed for an ordinary chat bot.
Reza only wants to ask questions and chat. He does not need the bot to browse websites, install plugins, run programs, or schedule tasks.
Setup menu
“Would you like every tool switched on, just in case?”
The decision
Pick the safest setup for Reza’s actual needs.
- Chat-only, with unnecessary action tools disabled
Add capabilities deliberately only when they are really needed. - Enable everything but tell the bot to be careful
A long safety prompt can replace restrictions. - Enable everything and ask for a yes/no approval in the same chat
An attacker with that account could never approve an action.
Reveal the explanation
You removed actions Reza does not need. Fewer tools means fewer ways a bad message can become a damaging action.
Least privilege means giving a system only the power it needs—not every power it might someday use.- The guide turns off browsing, scheduling, delegation, and other unnecessary capabilities.
- Security settings and installed code should not be freely rewritable by the agent itself.
- An approval coming back to the same compromised chat is not an independent security boundary.
Least privilege
Grant only the access and capabilities required for the actual job.