# Least-Privilege Context

> A context engineering pattern that gives each agent only the information, tools, and state needed for its role or current task.

- Category: Context & Memory
- Stage: Emerging
- Also called: Least-privilege context engineering, Scoped context
- Canonical: https://www.joelcsaji.com/ai-dictionary/least-privilege-context

## Plain English

Do not load the whole workspace, every credential, and every tool just because the agent might use them.

## Example

A payroll sub-agent receives payroll policy snippets and approval tools, while a benefits sub-agent receives different documents and no payment tools.

## Why it matters

Scoping context reduces token waste, limits prompt-injection blast radius, and makes multi-agent systems easier to audit.

## Related

- [Context Engineering](https://www.joelcsaji.com/ai-dictionary/context-engineering)
- [Sub-Agent](https://www.joelcsaji.com/ai-dictionary/sub-agent)
- [Ambient Authority](https://www.joelcsaji.com/ai-dictionary/ambient-authority)

## Sources

- [arXiv: ALARA for Agent Harness Engineering](https://arxiv.org/abs/2603.20380)
- [Tian Pan: MCP Ambient Authority](https://tianpan.co/blog/2026-05-07-mcp-ambient-authority-tool-chaining)