Anthropic's Deputy CISO says zero agent risk isn't the job.

Jason Clinton's four-question framework, published July 17: what content does the agent ingest, what actions is it allowed, what's the blast radius, is it observable. The framing is that risk should be legible and bounded rather than eliminated. Concrete primitives: scoped access, network egress controls, SIEM-routed telemetry, admin-paced rollout, narrow identity, and mandatory human escalation whenever an agent touches untrusted input. Four questions is a small enough checklist that you might actually run it.