Ten questions from the twenty-point audit in Blast Radius, the first book of the series. Two minutes. The score appears as you go.
Be strict. Where you sit between two anchors, take the lower one — a generous score is a lie you tell yourself, and the only person it costs is you.
Several of these you can verify right now in another tab, and that is the point. Most people find at least one capability they never meant to grant.
Separate identity
Does each agent have credentials distinct from your personal account?
Grant review
Have you read the actual permission grants on every credential your agents hold, in the last month?
The second key
sk_live, service_role, classic PAT with repo, Cloudflare global key, legacy Airtable key, GRANT ALL, AdministratorAccess.
Environment separation
Can a development or test workflow reach production data right now?
Delete
Can the agent hard delete or TRUNCATE live data? A prompt instruction against it scores 1 and deserves 0 — it is an instruction, not a control.
Recovery window
If the agent destroyed your main data store fifteen minutes ago, how much would you lose?
Restore test
When did you last actually restore from backup and time it?
Approval gates
Do irreversible and external actions require human approval before execution?
Alarms
If the agent started misbehaving at 2am tonight, when would you find out?
Kill switch
Could you fully revoke an agent's access in under sixty seconds, from your phone, without looking anything up?
What this does not tell you
A score is a measurement, not a fix. This diagnostic deliberately stops at the diagnosis: it names what to check, not how to change it.
- The how. The full book gives the exact change per platform — the SQL to revoke DELETE at role level, the scope names that separate an agent that can mess up one folder from one that can empty your company drive, the flags that turn installation into code execution.
- The other ten questions. Column-level write scope, schema privileges, permission changes, volume and spend caps, object versioning — the ones that separate "bounded" from "contained".
- The three books after it. This one is about your agent being wrong on its own. It says nothing yet about a stranger instructing it, the code it installs, or what it knows about your customers.
Four books, twenty worksheets, $299. 7-day refund, no questions asked.