Security
What actually stops an AI agent from running a bad DELETE?
Not the prompt. A request to delete every inactive customer walks through ownership, permission, schema and policy checks — then waits for a person to approve exactly those records.
· 4 min read