Policy engines

A seven-rung risk ladder pushes agent permissions out of the prompt and into an authorization layer

Hossein Hezami's ladder runs observe to destroy and gives sensitive reads a class of their own. The interesting part is the TypeScript, where risk arrives as a field on the request and someone other than the model has to set it.