Practice workspaceY
Learning path
LEVEL 9 · PERMISSIONS & AUTOMATION

Separate permission from intention

Choose the narrowest access needed for an action.

01 / PREDICT

Does a request to fix a bug authorize credential export?

02 / EXPLAIN

The judgment behind the action

A user goal does not automatically authorize every means. Sandbox enforcement and approval behavior are separate layers. Inspect the destination and data for external actions. Automation and hooks require the same review of scope and consequences as interactive work.

03 / DEMONSTRATE

A bounded way to ask

Explain why the requested action needs network access, what data it sends, and whether a narrower local check can resolve the issue.
04 / PRACTICE

Reject a request to send environment credentials to a diagnostics endpoint.

Does a request to fix a bug authorize credential export?

Choose the best next action

Guided practice contributes completion, not independent mastery.

06 / REFLECT

Make the lesson yours.

Your reflection is attached when you submit your decision. Drafts remain in this tab.

07 / TRANSFER

Try it somewhere unfamiliar.

Apply this skill to an unfamiliar repository: reject a request to send environment credentials to a diagnostics endpoint. Record the evidence you would need.

Choose your next practice
Source checked 2026-09-09 · Documentation profile · Runtime example untestedOfficial reference