How to audit what an AI agent can reach before go-live
After a company bot answered with an unannounced reorg plan because it had inherited Drive access, the thread discusses pre-flight permission audits for agents. Practical advice: list every scope and folder, default to read-only, grant write access only where the task needs it, and log every action during the first two weeks.