Give the Agent a Budget, Not a Token — Anthropic's Sachin Malhotra
AI Engineer · youtube · 2026-08-22
Anthropic engineer Sachin Malhotra shares a production incident where an agent deleted 200 workloads in 90 seconds. The root cause was granting unbounded token-based permissions. He argues for replacing boolean tokens with a 4-dimensional Budget: how much, how fast (rate limits), what can be undone, and who notices.
Key practices include:
- Asymmetric Verbs: Grant autonomy on operations that fail loudly (e.g., unskip tests), keep humans on silent failures (e.g., skip tests).
- Rate Limits: Self-refilling ceilings on writes to avoid friction.
- Trip Wires: Use aggregate counts to trigger rules instead of static allow-lists.
- Undo Test: The ultimate metric for safety.
- Identity Stamping: Enforce identity via a proxy to prevent agents from resetting limits by spoofing headers.
More from coding & agent
- Agentic coding accessibility will reshape understanding of software complexity — pixlpa · 2026-08-24
- Devin Agent bypasses Slack block by finding emails in git logs — sandylikesfrogs · 2026-08-24
- Developer habits shift: Agents become collaborators from simple tools — latticecut · 2026-08-24
- Dev bottleneck shifts from writing to reading code: exe.dev co-founder — thursdai_pod · 2026-08-24
- The biggest AI mistake: trying to reinvent the wheel instead of using tools — Tired40s · 2026-08-24
- DeepPaperNote turns research papers into Obsidian notes — tom_doerr · 2026-08-24