Before you give an AI assistant access, test what it cannot do
A practical security review for limiting permissions, testing forbidden actions, separating public messages from operational controls, and removing temporary access.
Read Field Note 001Field notes
Evidence over excitement.
Implementation notes, security decisions, experiment results, and direct accounts of what worked and what did not.