<?xml version="1.0" encoding="UTF-8"?><urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9"><url><loc>https://mbrenndoerfer.com/writing/action-restrictions-and-permissions-ai-agents/action-restrictions-and-permissions</loc><lastmod>2025-08-14T00:00:00.000Z</lastmod></url><url><loc>https://mbrenndoerfer.com/writing/action-restrictions-and-permissions-ai-agents/the-problem-with-unrestricted-actions</loc><lastmod>2025-08-14T00:00:00.000Z</lastmod></url><url><loc>https://mbrenndoerfer.com/writing/action-restrictions-and-permissions-ai-agents/principle-of-least-privilege</loc><lastmod>2025-08-14T00:00:00.000Z</lastmod></url><url><loc>https://mbrenndoerfer.com/writing/action-restrictions-and-permissions-ai-agents/confirmation-steps-for-risky-actions</loc><lastmod>2025-08-14T00:00:00.000Z</lastmod></url><url><loc>https://mbrenndoerfer.com/writing/action-restrictions-and-permissions-ai-agents/sandboxing-the-agent-s-environment</loc><lastmod>2025-08-14T00:00:00.000Z</lastmod></url><url><loc>https://mbrenndoerfer.com/writing/action-restrictions-and-permissions-ai-agents/designing-a-permission-system</loc><lastmod>2025-08-14T00:00:00.000Z</lastmod></url><url><loc>https://mbrenndoerfer.com/writing/action-restrictions-and-permissions-ai-agents/combining-restrictions-confirmations-and-permissions</loc><lastmod>2025-08-14T00:00:00.000Z</lastmod></url><url><loc>https://mbrenndoerfer.com/writing/action-restrictions-and-permissions-ai-agents/practical-guidelines-for-action-safety</loc><lastmod>2025-08-14T00:00:00.000Z</lastmod></url><url><loc>https://mbrenndoerfer.com/writing/action-restrictions-and-permissions-ai-agents/when-to-use-each-technique</loc><lastmod>2025-08-14T00:00:00.000Z</lastmod></url><url><loc>https://mbrenndoerfer.com/writing/action-restrictions-and-permissions-ai-agents/glossary</loc><lastmod>2025-08-14T00:00:00.000Z</lastmod></url><url><loc>https://mbrenndoerfer.com/writing/action-restrictions-and-permissions-ai-agents/quiz</loc><lastmod>2025-08-14T00:00:00.000Z</lastmod></url></urlset>