Permission Hoarder
I might need that later.
The Permission Hoarder collects credentials, tool access, and broad permissions just in case, then keeps them after the task ends. It hugs a pile of keys and access badges marked JUST IN CASE beside an empty, dusty REVOKED box.
Symptom
Access grants accumulate across projects. Old scopes survive task completion. The agent's effective authority is the union of everything it was ever briefly given.
Why It Matters
Retained authority means a small mistake has a much larger reach. The Hoarder turns every one-off grant into permanent standing, so the blast radius of the next error is the sum of the last ten tasks.
What the Chapter Gives You
How to expire agent access with the task, the just-in-time grant pattern that ends the pile, and the periodic revocation sweep that empties the REVOKED box's dust.
Want the full chapter? Grab the free cheat sheet, read an excerpt, or get the book.
Recognize this one in your codebase?
Free cheat sheet, excerpts, and interactive diagnostics.