Sandboxing and Containment

A bank teller's cash drawer holds a limited amount of money. Larger sums stay in a vault, which one person cannot open alone, and a camera records the counter. The bank does not expect its tellers to make no mistakes. It arranges the room so that one mistake, or one dishonest teller, can cost only what the drawer holds.

An agent that runs code needs the same arrangement. Permission design, from the least privilege lesson, works when a tool has a narrow shape that you can check