2 min lesson
Capability controls: least privilege for what an agent can do
Give a plain answer to "Why isn't a command allowlist alone sufficient and what does each additional layer add?" Then ground it in one lesson detail.
Step 1 of 4
Knowledge and context shape what the agent says.
Capability controls govern what it can execute and that's where blast radiusHow much breaks if a change goes wrong; the scope of potential damage. Press Enter for the full definition. lives. The principle is the one you'd apply to any service account: least privilege, deny by default, log everything.