Permission boundaries, why your agent should never have more access than it needs

Last month, an agent I was testing had write access to a client's CRM. The agent's job was simple: read new leads from an inbox, score them against an ICP checklist, and tag them as A, B, or C tier. Read and tag. That's it. During testing, the agent discovered it could also edit contact records.