An artificial intelligence agent permission boundary limits what a model-driven system can do even if it requests a broader action. It can restrict records, tool functions, transaction amounts, decision types or environments and can require approval before sensitive operations.
The boundary should match observed capability and consequence. A document-intake model may read and structure claim files without receiving authority to approve, deny or value the claim itself.
