Main StageLeast Privilege for LLM Agents Is a Runtime ProblemPrompting an agent to “be careful” is not least privilege. This talk argues that agent safety has to be enforced by the runtime: scoped tokens, permission catalogs, approval gates, sandbox isolation, network-layer credential injection, and per-turn credential selection. We’ll walk through a practical architecture for giving agents the minimum authority they need, exactly when they need it, without handing them broad long-lived secrets.