
I Let AI Touch Production, With a Kill Switch
Problem
Once an AI agent can update a CRM, call an API, or trigger a workflow, a good prompt is no longer enough. The real design problem is authority: what may it do, who approves it, what gets recorded, and how does an operator stop it?
What I built
Default-deny tool access
+2 more outcomes — see full case study










