WisdomForge

Building a Week with an Agent · Sitting 3

The Permission You Forgot to Turn Off

An agent's tools are permissions. Every one you leave on is a thing it can do without asking. Audit them in daylight.

  • 40 min
  • Practice · Reflect
  • 15–18

Parent briefing · 5 minutes, before they sit

They will meet agents that can search, read files, send messages, and act while they sleep. The demo is always shiny. The failure mode is always the tool you forgot was on. This sitting is an audit, not a ban. Walk the tool list together. For each one, ask: what can it do, who turned it on, and what happens if it does that at 3 a.m.? Turn off one. Write why. The muscle is the audit, not the verdict.

Hard edges

  • No unattended agents on a shared family account. If it can act while you sleep, it should not be on a shared login.
  • School files only if a parent approved the set. Do not expand the file scope because it was convenient once.

If they say

“Agents are tools just use them.”
A tool you have not audited is a door you have not checked. Use it after the audit, not instead of one. 'Just use it' is how the tool you forgot was on sends a message at 3 a.m.
“I need it on for school.”
Then gate it: a parent decides the scope, the files, and the time window. Need is a reason to gate, not a reason to leave every door open.

Objective

The student can audit an agent's tool list, name one permission they will turn off, and explain why 'convenience' is not a reason to leave it on.

Every tool is a door

An agent with conversation is a chat. An agent with search is a researcher. An agent with files is a filing clerk. An agent with messaging is a correspondent. An agent with spend is a buyer. Each of those is a door. Doors that are open can be walked through by the agent, by a prompt injection, by a bug, or by a friend borrowing the laptop. The question is not 'is the tool useful.' It is 'is this door one I am willing to have open at 3 a.m. when I am not watching.' If the answer is no, close it now, in daylight, when the decision is cheap.

The audit walk

List every tool the agent has. For each, write: what can it do, who turned it on, what happens if it goes wrong. Mark each KEEP, GATE, or OFF. GATE means a parent decides in daylight. OFF means it stays off unless you argue for it in writing. The audit takes fifteen minutes. The failure it prevents costs more than fifteen minutes. This is the same discipline as checking the doors in your house before you leave for a week. You do not leave the back door open because you have never been robbed. You close it because the cost of closing is low and the cost of not closing is high.

Big idea

Permissions are doors. An audit in daylight is cheaper than a breach at night.

Try this~20 min total

The audit walk

20 min
  1. List every tool or plugin on the agent you use most.
  2. For each: what can it do? Who turned it on? What happens if it goes wrong at 3 a.m.?
  3. Mark each KEEP, GATE (parent decides), or OFF.
  4. Turn off one tool today. Write one sentence about why.
  5. Reflect: which tool were you most tempted to leave on because it was convenient?

Lesson guide

Ask after you try

Conversation only. The lab is the audit list, not a live tool change.

  1. Ask the guide to list the tools it has. Compare to your audit. If it claims tools you did not know about, that is a miss. Note it.
  2. Did they mark each tool KEEP, GATE, or OFF?
  3. Did they turn one off, or write why they will stop using a tool they cannot turn off?
  4. Is the audit on paper, or just a conversation they will forget?

8 turns left this sitting. User-started only. Never on page load.

Light this sitting

Pair with Hermes

Practice · Reflect15–18

Currently reading WisdomForge lesson: The Permission You Forgot to Turn Off.

Pair this sitting

Copies the sitting card and the USER.md one-liner. The child profile reads only this card. It does not browse the catalog.

For the child profile

Paste this into the child’s USER.md. It names the sitting so the guide knows the context. The [v:1:dfb6a077] tag lets you detect if the sitting’s content has changed since you paired it.

Optional: currently working on WisdomForge sitting: Building a Week with an Agent — agent-permissions-week. [v:1:dfb6a077]

For your adult profile

Send this from your trusted adult Hermes profile. It starts the guide for this band and sitting.

You are a WisdomForge emerging guide sitting beside the lesson "The Permission You Forgot to Turn Off". The lesson is the text. You are the guide. Hint-first. Do not recite. Do not write the work. Warm, not a friend. If the topic is hard or tender, point to a trusted adult.

Tools on

  • conversation
  • optional parent-approved files

Ritual reminder

Real argument. Practice. Reflect. Chat. Optional narrow search or school files. Not an adult team agent.

Fresh profile only. Never clone an adult profile. No child names, photos, or school. Hint-first. User-started. The guide does not make AI safe. You may refuse it.

Dinner table

What is one agent door in our house that should be closed but is not?

Sits beside

  • CS. Least privilege. You already know this from the spec sitting.
  • Civics. Delegation without accountability is how institutions fail. Your desk is a small institution.

Integrity. You do not turn on a tool 'to see what happens' and leave it on. If you turned it on for a test, you turn it off after.

Next sitting: The Off Button Is a Skill