Anthropic reached the same list

Anthropic published a blog post detailing how it secures its AI-native software development lifecycle, noting that Claude writes roughly 80% of the code merged there. The post outlines the Principle of Least Agency, which restricts agent access and actions rather than relying on instructions. The principles align with the Accessible Ops list, and the post argues for making fold the default in chant to enhance security.

Anthropic published how they secure an AI-native software development lifecycle https://claude.com/blog/how-anthropic-secures-its-ai-native-software-development-lifecycle . Claude writes roughly 80% of the code merged there, so no control that depends on a human reading everything survives. Accessible Ops https://accessibleops.net is fourteen principles for infrastructure operations, written for the same pressure from the other end. Most of what Anthropic describes lands on rows in that list. Their governing rule, the Principle of Least Agency, draws hard boundaries around what an agent can access and do rather than relying on what it is told. chant is partway there. chant build imports your TypeScript and runs it, held safe only by lint rules. chant build --fold reduces the source to a value without executing the module, and --sandbox confines whatever falls back. Anthropic’s rule is a good argument for making fold the default.