#least-privilege

The fastest way to connect an agent to an API is one token with every scope it might ever need. It's also how a triage bot ends up able to delete the repo.

PowerShell can touch nearly everything on a Windows estate. Here's the layered architecture that lets an agent use it without becoming the attacker's shell.