Blast radius
Everything a piece of software could reach if it were successfully turned against you.
Borrowed from incident response, and the most useful single idea for granting permissions to an agent. It asks a different question from is this safe, which nobody can answer, and replaces it with what happens when this is tricked, which everybody can.
The reason it matters more for agents than for ordinary software is that an agent reads text it did not write and will eventually follow some of it. The probability of that is not really under your control. The consequence entirely is.
It converts an argument about trust into an argument about scope, and only one of those has an answer you can check afterwards.
Scoring permissions one line at a time. Read files and unrestricted egress are each unremarkable, and together they are exfiltration. The set is what has a blast radius, not the line.
Related terms
See Blast radius on a real listing
Every term here shows up in the catalogue next to a real result, with the findings published and the limits stated. Free to browse, no account needed.
Open the catalogue