← Back to Syllabus
Week 3 Assignment

Add Permission Tiers

Take your Week 2 sandbox harness and add permission gates. Classify each tool into Auto, Confirm, or Sandbox tier. Then add a 4th tool (Bash) and explain which tier it belongs to and why.

Deliverables

  • 1. Updated sandbox screenshot with gates on each wire
  • 2. Tier classification table: tool → tier → justification
  • 3. Write a 1-paragraph security policy: what should NEVER be auto-approved?

Common Pitfalls

Auto-approving file writes (should be Confirm)

No sandbox tier at all (Bash must be sandboxed)

Security policy that just says “block everything” (defeats the purpose)