Overview
Agentic systems combine broad context with powerful tools, so small configuration mistakes can expose secrets, install unsafe dependencies, damage data, or extend an attacker's reach. Absolute security is not realistic. The practical objective is to remove the highest-probability and highest-impact failures with a small set of disciplined controls.
Security should be proportional to exposure. A local personal tool and a public-facing service do not have the same attack surface. As a system becomes more valuable, more public, or more connected, the required controls increase.