← All IntelClip / EducationPermissions in practice: auto review over yolo mode, plus org-level blast radius limits
From Full Workshop: Setting Yourself Up for Success —Jason Liu, OpenAI Codex · ≈30:08
Pairs a personal control (auto review plus an AGENTS.md rule) with an organizational one — admin settings that stop agents from reaching external recipients.
What’s in it
- Pairs a personal control (auto review plus an AGENTS.md rule) with an organizational one — admin settings that stop agents from reaching external recipients.
Clip transcript
risk and how do you control that? >> Yeah, I mean there's always some kind of risk like like I think earlier versions might like edit a document a little too eagerly, right? Um, but realistically I think we've done I I think these models have done a really good job of being very precautious and more often than not it's me going like no please just just do it like just just like just sign the document like this is like please just like send this message. Um I found that uh the 55 models are pretty reluctant to take these like destructive actions. That's one thing. The second thing is if you look at the sidebar here you have the ability to change your permissions. And so as a show of hands, like how many people use like uh ask me for every permission? Yeah. Yeah. Exactly. Okay. How many people use like full auto full permissions yolo mode? Okay. I don't like that. Um and then how many people have used auto review? >> Yeah. So, I think auto review is actually has been really really great. And again, I'm usually annoyed by the fact that my models won't do more than I want them to do. Um, and so generally has not been as big of an issue. The only times the only examples where I'm really annoyed is it will like edit documents it shouldn't be editing, but I just like add something with the HSMD and it's never really messed with me too much. Yeah, I know that's not a real answer, but I think with a combination of auto review and agents MD file, I have generally felt pretty safe. Yeah. And then if you're also at an organization, there's different admin settings that you can have. So, for example, at OpenAI, uh you can't use an MCP server to send an email if any of the people in that email is a non OpenAI email, right? Or like you can't uh send a Slack message to external Slack channels. Um, that's when things get dangerous, right? But these are some things that you can control.
Comments
Checking sign-in…
Loading comments…