The Agent Is Not the Problem. The Permissions Are.
AI in Focus
Agent failures now cause unrecoverable damage, not typos. Three 2026 incidents prove it: a found token let one agent delete Railway production data, another wiped a production database, and a Meta account-recovery flaw exposed 20,000+ Instagram accounts.
In Practice
Built an AI Agent Middleware in FastAPI: a deny-by-default proxy between any agent and the systems it touches, anonymising sensitive data and logging every action.
Beyond Now
Permission decisions are product decisions now. They get made before an agent ever runs, not documented in a compliance policy after the fact.