Glossary: Vulnerability, Asset and Change Management

Excessive agency

Also written: too many permissions

An LLM app having more tools and rights than it needs, such as Kettle & Crane's assistant being able to issue refunds. The fix is to give it the fewest tools it needs.