Skip to content
ML Academy

Introduced on day 53

Least privilege

Giving a component only the tools, data and permissions the current task needs, ideally the requesting user's own, so a compromised step reaches little.

In detail

For GenAI applications this means per-task tool allow-lists, narrow purpose-built tools instead of raw SQL or HTTP, and credentials scoped to the user and held by the application, never in the prompt. It limits the damage of any successful injection regardless of how the injection worked.