ScopeMap: planning least-privilege permissions for AI agents

Описание и применение

ScopeMap – демонстрация планирования минимальных прав доступа для ИИ‑агентов, показывающая, как определить необходимые и лишние разрешения для заданных задач.

Задача

Determining the minimal set of permissions an AI agent needs to perform a specific task while avoiding unnecessary or risky capabilities.

Результат

ScopeMap successfully identifies over‑privileged capabilities, recommends a minimal set, and exports a structured JSON plan. Nine tests passed and a production build was verified.

Рабочий процесс

• Select a synthetic workflow (document summary, support response, or CSV analysis).
• Choose capabilities from a list (scoped file reading, broad file access, file writing, sending email, external network access, shell execution, persistent memory).
• ScopeMap analyzes the selection against workflow requirements.
• It highlights missing requirements, unnecessary permissions, and provides reasons for each recommendation.
• The user can apply the recommended set, edit a human‑review checklist, and export the plan as JSON.

Доказательства

ScopeMap recommends the scoped read capability and explains why the other permissions are unnecessary for this particular scenario.

Источник

The Lovable build reported nine passing tests and a successful production build.

Источник

ScopeMap is a rule‑based educational planner, not a live AI model, security scanner, sandbox, or permission‑enforcement gateway.

Источник