Least-Privilege Agent Starter

Problem: Teams give autonomous agents broad standing access; the hard part isn't the model, it's the guardrails.

An opinionated open-source starter for running an autonomous AI agent under real security guardrails, built after onboarding an AI "employee" on a local machine. It codifies five principles as adaptable templates: the agent gets its own isolated service account (its own identity, not an extension of yours), credentials scoped to the one job it does, advise-don't-act with a human approving anything irreversible, a lean always-on agent with disposable scheduled sub-agents for heavy work, and a written agent handbook defining scope and escalation before day one. Ships sanitized config, handbook, and security-setup templates.