ConeheadAI · lessons
Latest lessons
2 of 163 leftover lessons · tag=least_privilege. Start with the takeaway, then do the exercise. Tool-use focused — use AI you already have.
- SNK3-238toolsAPI key hygiene — the three rulesKeys never go in shared prompts or client code, get rotated when exposed, and get scoped to least privilege.L3–L6 · Verifier–Architect (bootstrap — system rebalances) · ~5m
- SNK3-083toolsConstrain tools before a long AI sessionBefore a long chat/agent session, set tool limits (domain allowlists, disable image/video gen, date cutoffs) so capability is not permission.L2–L5 · Capable–Builder (bootstrap — system rebalances) · ~4m