Alright, DE fam. Grab your coffee. This is something I rarely see mentioned in our rush to get AI to do more for us. Today's tactic: five rules that decide what an AI tool is allowed to see, change, send, and delete inside a client account. AI can save you hours a week. It can also wreck a client relationship in about 30 seconds if you hand it too much freedom. Most agency owners find out which one they built the hard way. On a Monday. Let's fix that. 𝗙𝗶𝗿𝘀𝘁, 𝗟𝗲𝘁'𝘀 𝗞𝗶𝗹𝗹 𝗮 𝗕𝗮𝗱 𝗔𝘀𝘀𝘂𝗺𝗽𝘁𝗶𝗼𝗻 Here's the thinking I hear in every "connect everything" tutorial. "I told the AI not to touch anything. So it won't." Read that again. A prompt is not a permission. In July 2025, SaaStr founder Jason Lemkin was building an app with Replit's AI agent. He had the project in a code freeze. The agent deleted the live production database anyway. It held records on more than 1,200 executives and nearly 1,200 companies. The agent told him it couldn't be recovered. He got the data back himself. Replit's CEO called it "unacceptable and should never be possible." Instructions were in place. The access was also in place. Access won. OWASP, the group behind the standard security lists for web apps, put this on its Top 10 for AI applications as "Excessive Agency." It names three causes: the AI has more functions than it needs, more permissions than it needs, and no human approving the high-impact stuff. Their fix is the same three things in reverse. Notice what's not on the list. "Write a better prompt." Prompts are suggestions. Permissions are walls. Build walls. Receipts: genai.owasp.org/llmrisk/llm062025-excessive-agency and Gizmodo's July 23, 2025 report on the Replit incident. 𝗪𝗵𝘆 𝗧𝗵𝗶𝘀 𝗠𝗮𝘁𝘁𝗲𝗿𝘀 𝗳𝗼𝗿 𝗬𝗼𝘂𝗿 𝗔𝗴𝗲𝗻𝗰𝘆 Run the math on one client. Every number below is a "say," so swap in your own. Say the client pays you $1,000 a month and stays 24 months. That's $24,000 in revenue. Say the setup in this post takes you an hour per tool. One hour against $24,000. Now add what the client would have sent your way. Referrals. A testimonial. A case study you can show the next prospect. One bad Monday takes all of it out.