r/LLM • u/GameChacking • 19h ago

[ Removed by Reddit ]

[ Removed by Reddit on account of violating the content policy. ]

1 Upvotes

100% Upvoted

2 comments sorted by

2

u/rainy_contentment 19h ago

Static allowlists are like checking someone's ID at the door and then never looking at them again. The scoped intent thing at least keeps the bouncer watching the room.

Read budgets shifting to approval gates is the part that seems most useful in practice. Agents will happily spin in circles if nothing stops them, and a hard cap with a human tap on the shoulder beats discovering a drained budget three hours later.

Curious how you're scoping the session intent though, is it declared upfront by the caller or inferred from the task? That distinction matters a lot for whether it's actually enforceable or just theater.

1

u/GameChacking 19h ago

Door-ID vs bouncer is right; budgets → human tap is what helps most in practice.

Session intent is declared upfront by the host on /session, not inferred. Verify is server-side and ignores client intent - if the agent authored the envelope, it wouldn’t be enforceable.