ANTIGRAVITY LABJP
TAG

least-privilege

2 articles
Back to all tags
Related:
security2Antigravity CLI1headless1permissions1automation1antigravity1permission1operations1architecture1
Integrations/2026-07-18Advanced

Turning Silent Auto-Approvals into Allow Rules, One Soft-Deny at a Time

In Antigravity CLI 1.1.3, headless -p stops silently auto-approving confirmation-required tools and instead soft-denies them, printing the required allow-rule name to stderr. This piece uses that output as a discovery source to build least privilege from an empty allow set upward, with a working harness and real numbers from a personal automation.

Antigravity/2026-07-11Advanced

Are You Actually Using Every Permission You Granted? Tightening Antigravity's Unified Permissions from Real Usage Logs

Once you flip a unified permission policy to 'allow everything,' unused grants quietly pile up. This is the grant-to-usage reconciliation loop: match granted permissions against your action logs, revoke what was never exercised, and narrow what's too broad — with working TypeScript and real numbers from solo operation.