AI agents need a different security model than chatbots
vasiliyivanov · reddit · 2026-08-28
The author argues that once an AI system can use tools, read files, send messages, browse, access SaaS accounts or trigger automations, the security question shifts from "can this model answer safely?" to "what can this model do, with whose credentials, against which data, under which approval rules?"
The controls that matter most: scoped permissions, human confirmation for irreversible actions, audit logs, separation of read and write access, prompt injection awareness, no silent access to broad workspaces, and a clear rollback path for automations.
More from coding & agent
- Agent writes custom NPU kernels in Chinese to maximize low-end compute — yacineMTB · 2026-08-28
- AI Agents Fail in Companies Because Workflows Are Messy, Not Models — serpratik · 2026-08-28
- Developer Argues Agent Memory Should Rely on Schema Over Semantic Retrieval — arpit_bhayani · 2026-08-28
- Driving Gamma via Claude (MCP): Practical Configs to Avoid AI Clichés — cloudybrain07 · 2026-08-28
- Kimi Code 0.39.0 ships experimental Remote Control for accessing local web sessions remotely — KimiDevs · 2026-08-28
- Analysis confirms ExploitGym scorer rejects poisoned agents — moyix · 2026-08-28