# AI Agent Permissions before Autonomy

Canonical page: https://2bcome.ai/blog/permissions-before-autonomy/
Content updated: 2026-09-15

OPERATING MODEL 5 min read

# Permissions before autonomy.

The control model we want before allowing an agent to edit a live website: defined scope, reviewable diffs, and explicit publication rights.

By [2bcome](https://2bcome.ai/about/) Written September 15, 2026 Updated September 15, 2026

An article from 2bcome. Opinion pieces are arguments, not product claims; build notes describe what we are learning while we work.

## A capable agent still needs limits

“Can the agent change the website?” is not one question. Reading a page, preparing a draft, opening a branch, merging a change, and modifying the domain are different actions with different consequences.

We want those distinctions to be visible in the system, not buried in a paragraph that the model might misunderstand.

Our starting principle is that permission to prepare a change is not permission to publish it .

## Separate the permissions

For the first website workflow, we propose four practical categories.

Read: inspect the allowed pages and relevant performance data. This gives the agent context without changing the site.

Prepare: create a brief, edit an allowed file in a working branch, or produce a content draft. The output is still a proposal.

Review: evaluate the change against the original goal, evidence, and checks. An approval should refer to a specific revision, not a vague idea of the work.

Publish: make that reviewed revision live through the normal deployment process. This is a separate capability and should be unavailable unless the workflow has it explicitly.

## Some areas start outside the boundary

Pricing, legal pages, account access, credentials, billing, and DNS should not be editable merely because an agent can improve a blog post.

The simplest first pilot is deliberately narrow. Allow a specific content directory and a small class of changes. Prohibit unrelated component edits and new dependencies. Stop when the requested task exceeds that boundary.

These are product requirements. They still need to be implemented and tested in the agent runtime; displaying a policy on a website does not enforce it.

## A second model is not the whole safety system

A reviewer agent can help challenge a draft. It should not be the only thing preventing an unauthorized action.

We want the surrounding software to enforce the allowed paths, tools, spend limits, and publication permissions. That leaves the models to reason about the work inside a boundary that does not depend entirely on their interpretation of a prompt.

## Broader access should be earned

The long-term goal is less manual supervision. The starting point is not full access.

We would expand permissions only after reviewing the actual work: which changes were useful, which checks missed something, and which mistakes repeated. Some workflows may stay human-approved because the cost of a bad change is not worth removing the checkpoint.

[Read the proposed permissions model](https://2bcome.ai/docs/approvals-and-permissions/) and [try the sample approval workflow](https://2bcome.ai/how-it-works/#demo).

CONNECTED WORK

## The next useful connection.

GUIDE

### [AI Agent Approvals and Permission Boundaries](https://2bcome.ai/docs/approvals-and-permissions/)

The proposed rules for what an agent may read, prepare, change, and publish, with defaults that keep sensitive actions out of scope.

[Explore](https://2bcome.ai/docs/approvals-and-permissions/)

GUIDE

### [AI Agent Audit Trails and Website Rollback](https://2bcome.ai/docs/audit-and-rollback/)

The proposed audit record connecting a goal, evidence, draft, approval, tests, and deployed revision.

[Explore](https://2bcome.ai/docs/audit-and-rollback/)

SPECIALIST

### [AI Website Agent for Reviewable Site Changes](https://2bcome.ai/agents/web-agent/)

Explore a Git-first AI Website Agent designed to make scoped website changes, run checks, and prepare reviewable diffs before an approved deployment.

[Explore](https://2bcome.ai/agents/web-agent/)