Security
Least privilege
A component is granted only the permissions its task requires, so that compromising it yields as little as possible.
In agentic AI this is the control that still works after the model has been manipulated, which is why it outranks input filtering. In databases it is the difference between a read-only tool and one that can drop a table.
Explained in depth
Excessive Agency
OWASP LLM03:2026 - excessive functionality, permissions, and autonomy turn a misbehaving model into a damaging action. The controls that bound it.
PgBouncerPostgreSQL connection pooling with PgBouncer - pool modes and what each one breaks, sizing the pool, secure auth_query, and running it multi-core.