← Saare guides
BILLU BHAIYA · FREE GUIDE

Login ≠ Permission

AI Agent Security — 3 levels: URL, npm, AI agent. Copy-paste code + checklist.

3 levels, ek nazar mein

  1. 1URL badlo — invoice/123 → 124: har request pe ownership check + Postgres RLS
  2. 2npm package — Shai-Hulud: release cooldown, approved build scripts, GitHub push protection
  3. 3AI agent — lethal trifecta ka ek leg hatao: least privilege, human approval, audit logs, kill switch
  4. ★Blast radius — maan lo agent compromise hoga, nuksaan chhota rakho

Poora guide (11 pages)

Cover: Login ≠ Permission Sab green tha, phir bhi leak: authentication vs authorization Level 1: URL badlo — ownership check Level 1: Postgres Row-Level Security Level 2: npm package — cooldown aur approved build scripts Level 2: tokens bachao — GitHub push protection Level 3: AI agent ka lethal trifecta Level 3: prompt ≠ boundary — least privilege, human approval Level 3: blast radius chhota rakho Checklist: secure agent tak Login = identity, permission har request pe