How an auto-publishing agent earns its permissions, channel by channel

Description and use

<p>A publish permission wants to be a boolean. <code>AUTO_PUBLISH=true</code>, ship it, go do something else.</p> <p>The trouble with the boolean is what it encodes: that the agent is trustworthy in general. Trust is not general. A drafting agent can be perfectly sound writing a technical post for a dev feed and be a liability in a subreddit where a link in the body reads as spam. Same model, same prompt, different blast radius.</p> <p>So in Content Agent Pro the auto-publish check is not a flag I set. It is a conjunction evaluated per <code>(product, channel)</code> pair, and most of the term

Problem

<p>A publish permission wants to be a boolean. <code>AUTO_PUBLISH=true</code>, ship it, go do something else.</p> <p>The trouble with the boolean is what it encodes: that the agent is trustworthy in general. Trust is not general. A drafting agent can be perfectly sound writing a technical post for a dev feed and be a liability in a subreddit where a link in the body reads as spam. Same model, same prompt, different blast radius.</p> <p>So in Content Agent Pro the auto-publish check is not a flag I set. It is a conjunction evaluated per <code>(product, channel)</code> pair, and most of the term

Outcome

<p>A publish permission wants to be a boolean. <code>AUTO_PUBLISH=true</code>, ship it, go do something else.</p> <p>The trouble with the boolean is what it encodes: that the agent is trustworthy in general. Trust is not general. A drafting agent can be perfectly sound writing a technical post for a dev feed and be a liability in a subreddit where a link in the body reads as spam. Same model, same prompt, different blast radius.</p> <p>So in Content Agent Pro the auto-publish check is not a flag I set. It is a conjunction evaluated per <code>(product, channel)</code> pair, and most of the term

Evidence

How an auto-publishing agent earns its permissions, channel by channel

Source