Your company brain will leak secrets: how we stopped it for big banks — Tanmai Gopal, PromptQL
Source
youtube.com
Author
AI Engineer
Date
Context
A shared company knowledge assistant needs controls over both who can read a fact and who can add it. The design described in PromptQL's talk uses one company-wide wiki with permissions on individual files. The AI agentAn AI system that doesn't just answer once but works toward a goal in a loop — taking actions, reading the results, and deciding what to do next.Full definition → proposes knowledge and its access scope; a person approves the change and becomes its named owner.
For collaborative work, the design keeps access credentials outside the agent's execution sandboxAn isolated environment where AI-generated code or agent actions run without being able to touch anything real.Full definition → and injects them per user at the HTTP and database layers. Shared knowledge can therefore coexist with individual access checks, while human approval makes changes attributable.
Terms in this piece · Glossary
AI agent — An AI system that doesn't just answer once but works toward a goal in a loop — taking actions, reading the results, and deciding what to do next.
sandbox — An isolated environment where AI-generated code or agent actions run without being able to touch anything real.
