Agent guardrails in architecture

A collection-scoped Firestore role still reaches every collection beside it

The finest grain Firestore IAM offers is the whole database, so least privilege inside one is a property of your code rather than of the policy you wrote. One hackathon build shows what the alternative costs.