Posts

Showing posts from October, 2026

AI Agent Tool Permissions: A Side-Effect and Approval Envelope

Image
The approval checkpoint binds a reviewed proposal to a bounded execution. Illustration. AI agent tool permissions should describe the effect an operation may produce, the resources it may touch and the conditions that permit execution. Human approval belongs inside that boundary. An approval envelope records the exact proposed action, its permitted lifetime and the circumstances that require the system to stop or ask again. Start with an operation that matters. Consider a hypothetical renewal assistant that reads an assigned customer account, prepares an internal note and proposes an email to the existing account contact. The assistant can help with all three activities, but the authority needed for each differs. Editing a private draft does not justify sending it, and permission to send one message does not justify exporting the account history. The design below is an engineering worksheet for that example, not a documented client deployment or a universal security standard. Its pur...

AI Agent Integration Estimates: Price the Connector Failure Paths

Image
An AI agent integration estimate becomes useful when it prices what happens after the connector stops behaving normally. A successful API call demonstrates access and mapping. It does not show the work needed when access expires, a write times out, an event arrives twice, or the agent resumes a partly completed task. Those paths need implementation, tests, operational records and someone authorized to resolve the remaining uncertainty. Use three separate budget lines: connector implementation, investigation of unresolved provider behavior, and ongoing operations. The worked example below allocates 140 engineering hours to one bounded integration, then models a separate discovery allowance and monthly operating scenarios. Every hour and dollar amount is a fictional planning input. Replace them with evidence from your system and supplier; they are neither market averages nor a quotation for an AI agent project. This is a connector estimate, not the full cost of building an agent. Model...