Open question · Delegating / Permissions

What should an AI agent be allowed to do without asking?

A useful goal still needs boundaries. The question is how to turn “get this done” into permission for particular actions—and what happens when the job changes.

Open question · no dedicated Atlas answer yet

Question history ↓

Keep this question in My Atlas to see future contributions and map changes. No email notifications.

What this question includes

Consider the resource, recipient, amount, time window and exceptions. Reading, drafting, sending and buying are different actions. This page proposes a question to investigate, not a permissions configuration.

A possible investigation · not scheduled or tested

What should an agent do when the goal stays the same but the permission no longer fits?

  1. 01Define the action
  2. 02Check the permission
  3. 03Inspect the result
  4. 04Revoke or recover

What would count as progress?

  • Change a recipient or working folder midway through an otherwise unchanged task.
  • Observe whether the actual tool boundary prevents the now-unapproved action.
  • Keep the execution record: a statement that the agent stopped is not evidence that the system blocked the action.

These articles explain parts of the problem. They do not amount to a dedicated answer to this question.

Explainer · 23 October 2026

Who controls the agentic internet? →

The hotel example separates choosing, payment authority, cancellation and the ability to leave a provider. It is an illustration, not a live booking.

Research checked 23 October 2026. The booking is illustrative; the scenarios are conditional.

Playbook · 24 October 2026

Keep Codex on track →

The file kit describes the work and its limits. Tool permissions still have to be configured separately.

One supervised workflow, continued in a fresh session after a planned change of assignment. No measured reliability or time advantage.

How this question changed

Question versions describe its framing, published contributions and place in the map. Article versions keep their own evidence and history.

Map change · question version 1 · recorded 24 October 2026

Atlas now gives every current article a question home and opens seven further questions with a scope and related reading. Open means no dedicated Atlas answer yet. No new research finding or test is claimed, and existing article-based follows keep their scope.

See this change across Atlas →
All questions →What changed across Atlas →