Environment Boundaries and Constraints › Balancing Safety and Capability

The art of setting boundaries is finding the right balance. Too restrictive, and your agent can't help effectively. Too permissive, and you risk security issues or unpredictable behavior.

Here are some guidelines for finding that balance:

Match boundaries to use cases: If your agent's job is to manage your calendar, it needs write access to calendars. But it probably doesn't need to access your file system. Let the agent's purpose guide your constraints.

Layer your defenses: Don't rely on a single boundary. Combine access controls, action policies, rate limits, and scope boundaries. If one layer fails, others provide backup protection.

Make risky actions reversible: When possible, design your system so mistakes can be undone. Draft emails instead of sending them immediately. Create calendar events that can be easily deleted. This gives you a safety net.

Provide escape hatches: Sometimes your agent needs to do something outside its normal boundaries. Provide a way for users to grant temporary elevated permissions for specific tasks, with clear warnings about the risks.

Review and adjust: Your boundaries aren't set in stone. As you learn how your agent behaves in practice, refine the constraints. Maybe some restrictions are too tight. Maybe others need to be stricter.