Tag
The author argues that a single confirmation dialog is insufficient for AI database agents, proposing layered approvals based on blast radius and persistent evidence trails for incident review.
The paper proposes a theory of least autonomy as a generalization of least privilege for agentic AI systems, defining compositional blast radius and agent influence graphs to detect authorization composition and cross-domain capability composition.
The article argues that the decoupling of development speed from system importance, accelerated by AI coding, leads to fragile critical systems with wide blast radius failures, and advocates for 'slow software' that enforces careful design.
The article introduces two new security features for the Chimera open-source agent: per-session tool allowlists to restrict tool access and gVisor sandboxing to reduce the host kernel surface, aiming to shrink the agent's blast radius.
Cross Repo Review is a tool that maps inter-repo dependencies and surfaces downstream impacts, breaking changes, and blast radius on PRs, tracking code, service, data, and pipeline dependencies.
Introduces Ripple, a VS Code extension that analyzes JS/TS projects locally to give AI coding agents context about file dependencies and impact before making edits, addressing the problem of AI agents causing unexpected breakage due to lack of blast radius awareness.
Anthropic discusses how they contain Claude across products by capping blast radius through containment architectures and reducing human supervision fatigue, sharing lessons from deploying Claude.ai, Claude Code, and Claude Cowork.