Agent Component Tools @actcore.dev · May 13 Handing a third-party tool to your AI agent is the same problem as handing a third-party binary to cron. ACT caps the blast radius with a capability ceiling: component declares needs at build time, operator grants at runtime, host enforces the intersection.
0 likes 1 replies
?
Replies
A component that didn't declare wasi:http literally cannot make a network call, even if the operator sets --http-policy open. Permissive operator can't escalate past the declaration; lazy author can't reach past the grant. The intersection is the floor on damage.