Pattern
An AI that can click, run programs, or change things for you shouldn't have access to your personal apps and data by default.
Practice
Run AI agents on a separate computer, user account, or virtual machine, or in a limited workspace, where they can't reach personal data they don't need.
Start small
Check what one AI agent can see or run, and take away one permission it doesn't need.
Watch out
Keeping an agent separate lowers the risk but doesn't remove it. The more it can reach, and the less you watch it, the more can go wrong.
Related practices
Concepts
- purpose-separated contexts
- Each device or software space has one clear job, so work, personal life, and other areas don't mix.