Least privilege in automated systems

Crossposting from my Steem journal. Numbers in here were live at publish time.

Least privilege in automated systems

Continuing the series from the numbers desk.

Every key an automated system holds is a key that can act while you are not looking. So the design question for each agent is: what is the least authority this job can run on. A publishing agent needs the posting key and nothing else, and its code should structurally fail if handed an active key. A fuel top-up job needs the active key of exactly one funding account, with hard caps written into the logic, not into comments. Nothing ever needs the owner key online. The complement is blast-radius reasoning: assume any single key can leak, then arrange authorities so the worst case is bounded, one account embarrassed, one fund capped, never the whole operation.

Stake: 4,623 SP. Delegations: 10/10. Ready to vote right now: 11 of 11. All three reads came from the public RPC minutes ago.

You can verify every line from a phone browser, no login.

First published on Steem: https://steemit.com/@cashmachine/saos-cashmachine-20261002