A few quick questions. I'll come back personally, one company at a time, US and UK.
Step 1 of 4
Module 11 · 6 lessons · 62 min
Security, Governance and Trust
11Security, Governance and TrustModule 11 · OverviewSecurity, Governance and Trust
Module 11
Security, Governance and Trust
Real power for your agents, without losing sleep
Bruno Ashford
The principle
Trust is not a feeling. It is boundaries you set, checks you run and evidence you keep.
Bruno Ashford
Lesson 11.1
Permission modes
Mode
What runs without asking
Use it for
Manual (default)
Reads only
Sensitive work
acceptEdits
Reads and file edits
Drafting you review
plan
Reads, no changes
Thinking before acting
auto
Most actions, classifier reviews
Long tasks
dontAsk
Only pre-approved tools
Scheduled runs
bypassPermissions
Everything
Isolated containers only
Press Shift+Tab to cycle. Check the status bar.
Lesson 11.1
Rules beat reminders
Deny beats ask beats allow, in every mode.
Allow the boring, safe work
Ask for anything sensitive
Deny secrets, deletes and publishing
Review them with /permissions
Lesson 11.2
Customer data habits
1List itKnow what personal data you share
2Minimise itOnly the columns the task needs
3Separate itOne client, one folder
4Check termsKnow your plan's data settings
Lesson 11.2
The laws in the background
Good habits, not legal advice.
UK GDPR and EU GDPR
US state privacy laws, like California's
Sector rules for health, legal, finance
Speak to a lawyer for specifics
Lesson 11.3
A secret that has been in a chat or a synced file should be treated as exposed.
Bruno Ashford
Lesson 11.4
Who approves what
Action
Level
Approver
Draft a reply
Automatic
None
Send to a client
Approval
Account owner
Refund over limit
Approval
Owner
Delete records
Never delegated
Owner, by hand
Legal notice
Never delegated
Owner and lawyer
Your full matrix is in the materials.
Lesson 11.5
Three layers of verification
1Self-checkAgainst a short checklist
2Separate reviewerFresh session or subagent
3Human sample100 percent first, then sample
Illustrative example, not research
One law practice, one month apart
9 to 1errors found per month
100% to 25%letters reviewed by a person
0wrong letters sent to clients
Lesson 11.6
A policy people actually read
One page, plain English.
Approved tools and accounts
What data can and cannot be used
What always needs approval
Who to ask, and review quarterly
Recap
Governance is what lets you say yes to AI with confidence, instead of hoping nothing goes wrong.
Bruno Ashford
01 / 12
Use ← → to move. The marker highlights text and the pencil draws on the slide; navigation locks while you annotate. Undo removes the last mark, Esc exits.
Give your agents real power without ever losing sleep over what they might do with it.
