A practical guide
Azloop · Engineering notes
Limit the tools
Expose only the operations required for the task. Validate every tool input on the server and apply existing user permissions.
Separate suggestions from actions
Let the agent draft a proposed action. Require human approval where the consequence justifies it, and keep the approved scope explicit.
Treat retrieved content as data
Documents and webpages may contain misleading instructions. Do not allow retrieved text to redefine authorization or disclose private information.
Make recovery possible
Record meaningful events without logging unnecessary personal data. Use bounded retries, duplicate protection and a clear way to stop or reverse work.