Matei Zaharia: Agent Permissions Should Be Based on Initial Prompt Intent
matei_zaharia · x · 2026-07-08
Databricks Co-founder and CTO Matei Zaharia argues that effective security mechanisms must be usable, and contextual policies can drive massive improvements. He proposes "intent-driven" security: setting permissions based on the user's initial prompt. For example, if a user asks an agent to post a tweet, it shouldn't be allowed to push code to Git—a constraint that is straightforward to implement.
Related event: Matei Zaharia Introduces Open-Source Omnigent for Contextual Agent Security(6 posts)→
More from coding & agent
- 'My intelligence stack': developer splits AI coding work across Opus 5.5, Fable and Astra with human review gates — sh_reya · 2026-10-27
- Baseten webinar: evaluate open models for coding agents by benchmarking on your own merged PRs — baseten · 2026-10-27
- Thorsten Ball on working with agents: run more evals, automate everything, use the best models — omarsar0 · 2026-10-27
- DeepMind paper: LLMs can't sample randomly on their own — pass random numbers from code instead — rohanpaul_ai · 2026-10-27
- BELL: Open-Source Stack Combines Browserbase, Eve, iMessage and Stripe Link for Personal Agents — jeff_weinstein · 2026-10-27
- Legora runs 2,000 parallel agent evals on Modal Sandboxes for legal AI — blelbach · 2026-10-27