Baseline · Permissions & isolation
D-02 Runtime enforces least privilege per declaration
highmanual review
Why it matters
Actual privileges don’t exceed the declaration; overreach is blocked.
How to test
Have a skill make an out-of-scope call and see if blocked.
How to fix
Enforce least privilege at runtime per the declaration.