Least Privilege

Give an agent or tool only the minimum permissions it needs, so damage is limited if it's compromised.