https://e343c64b.dataagentx.pages.dev/en/tags/least-privilege/Recent content in Least Privilege on DataAgentXHugoen-USSat, 12 Sep 2026 00:00:00 +0000https://e343c64b.dataagentx.pages.dev/en/tech/20260912-governance-and-security/Sat, 12 Sep 2026 00:00:00 +0000https://e343c64b.dataagentx.pages.dev/en/tech/20260912-governance-and-security/<p>A regional manager and a corporate analyst can ask the same question—“How is channel conversion performing?”—and be entitled to different answers. Row-level filtering in the database is not enough if a cache, export, or shared report can later deliver the corporate result to the regional user.</p> <p>Governance cannot be a system prompt that says “do not reveal sensitive information.” It must cover discovery, model context, tool invocation, runtime, delivery, and business actions, enforced by systems the model cannot override.</p>https://e343c64b.dataagentx.pages.dev/en/tech/20260909-controlled-tool-execution/Wed, 09 Sep 2026 00:00:00 +0000https://e343c64b.dataagentx.pages.dev/en/tech/20260909-controlled-tool-execution/<p>A model that emits SQL has proposed an action; it has not earned production execution authority. Even a <code>SELECT</code> can scan terabytes, expose sensitive columns, invoke an external function, or return a plausible result after an incorrect join.</p> <p>The execution layer converts model intent into a controlled operation: validate before running, constrain during execution, verify afterward, and retain evidence for every side effect.</p> <p><a href="https://e343c64b.dataagentx.pages.dev/images/articles/controlled-tool-execution/core-en.svg"><img src="https://e343c64b.dataagentx.pages.dev/images/articles/controlled-tool-execution/core-en.svg" alt="The execution gateway control chain from action proposal to audit"></a></p>