09. Agent Permission Is More Than Allow or Deny
Authorization decides whether one principal may perform one action on one resource under specific conditions
Technical research notes and engineering experiments
16 篇文章,按顺序阅读或从当前问题进入。
Authorization decides whether one principal may perform one action on one resource under specific conditions
Concurrency shortens only independent waiting time and adds result joining, cancellation, and resource pressure
Longer retention does not create stronger knowledge; unverified memory carries old errors into new tasks
A plausible answer does not prove that evidence is real, execution was authorized, or interruption recovery is correct
The model does not receive one prompt. It receives context blocks assembled from different sources for different purposes.
The model does not observe local execution; the runtime must carry evidence into the next turn
The model does not operate the system directly; it selects from the actions exposed by the runtime
Retrying a model call spends computation; retrying a send, payment, or create operation can change the external world twice
A second request carries more than the new input; the history policy determines latency, cost, and recoverability
Reconstructing an Agent from requests, events, and failures instead of inferring it from product descriptions