Tool
Agent access limit sheet
Write down what an agent may touch before it is turned on.
Allow is what you listed. Deny is inherit. If inherit is yes, the gap line stays. Empty read, write, or call lines stay as “not listed.” They are not filled in for you.
Output
Context, Gartner’s figure, not yours. In Gartner’s second-quarter survey of 297 cybersecurity leaders, 54% have no defined limit on agent access, or they let the agent reuse a person’s access.
Tools. Also: Renewal scorecard, SBOM request, Vendor claim, Token cost.