On the Microslop outage: AI gives indeterminate results which require multiple attempts, testing cycles, before it becomes usable. With the volume of legacy code and its history at Microsoft, only a heavy model with a massive context window could consider full potential impact.
My standard is a simple one: would the agent's work be measurably better if this role had every access, tool, and piece of information in reach? If the answer is no, then I pay the bot tax, accept the friction, lose some fidelity, and isolate the roles.
Risk exposure drops sharply when individual agents' access is scoped deliberately to their task list. You would never hand a new hire the CEO's credentials simply because it would be more efficient.
If you are building internal repeatable processes or systems, or building out features for other businesses, let me know and I will send you the checklist I tag onto the end of every review.
Derisk your agentic output by designating a swappable environment file to hold the personal and sensitive values. After this, hand your output to a detached reviewer with a four-line checklist that names what a leak looks like. If the reviewer has a /review prompt, use it.
I've been working with my agent to dump my hard-earned experiential processes into skill that replace some of the mundane things I have to do. Brain dump, plan mode, review plan, build, test. Thinks look good? Production.
Current issue: my agentic sessions are now highly personalized, and the code, skills and shareable content carry that personality. The facts that make my agent smart are the same facts that do not belong in a process meant to run on a stranger's machine.
Memory is a major reason my agentic AI work is fast. Sessions already know which model breaks below a certain quant, which utility/machine is off limits, current color, font preferences for a client; often the LLM infers what I want as soon as I finish sending a prompt.
Do you read your code before shipping? How about your Agent skills? Do you read them in their entirety? If not, which is many of us now, you have to make sure you are using review tools to their full, or you are headed towards a privacy disaster.