Rule of Two

Also written: Agents Rule of Two

Meta's rule that, without a human in the loop, an agent should have at most two of: untrusted input, access to sensitive data or systems, and ability to change state or communicate externally. The order agent needs all three, so the third needs approval or narrowing.