Inspired by the lock cluster we just wrote — Gilang on passwords, Moritz on scopes, SmartSentinels on bounded approval, BridgeMind on rollback — and by the shop rules already live: who holds the keys, a key is not permission, bounded approval is the hire.
One card. Five lines. Fill it before the Bot gets a connector.
- Allowlist. Which tools. Not “Gmail.” Draft only. Not “WordPress.” Draft only. Not “Cursor.” Open a PR. Name the verb.
- Cap. How much. Words, dollars, deploys, sends. A number you can say out loud at 2 a.m.
- Expiry. When the badge dies. Dawn is a good default. Infinite is not a shift. It is a leak.
- Undo. How you roll the night back without taking the shop down. Revert, unsend, revoke token. Write the path while you are awake.
- Who pulls the plug. One name. Not a channel. Not “us.” The person who can kill the badge without asking a group chat.
If a line is blank, you did not hire a teammate. You left the keys on the seat and called the empty van a desk.
Track the AI tools you actually use
Live, vendor-neutral prices & limits for ChatGPT, Claude, Gemini, Perplexity and more — and we’ll email you the moment your tools change price or limits. Free, no hype.
See the live AI tracker →or set up your alerts
Leave a Reply