Module 03 Summary

What this module established

Give the agent the narrowest tool that does the job. A capability the tool does not have is a guarantee; a capability it is told not to use is a hope - and a broad tool cannot be made safe by instructions, because it executes whatever arrives.

Carry forward

• Validate shape and policy separately. A schema accepts a refund of ninety thousand because ninety thousand is a number.
• Idempotency keys come from the run id and step name. Deduplicating on arguments cannot tell two real requests from two retries.
• Write the permission list first, in four categories, and state what enforces it. Anything on never enforced by an instruction is not on it.

Before moving on

Move on when three calls to your riskiest action produce one effect, and every entry on your never list is enforced by a written rule.

Mark complete