Your AI agent passed every test. Then someone changed one setting.

Suddenly, the same agent that could only read customer records could also modify them.

Nothing about the model changed.

The prompt was identical.

The workflow looked exactly the same.

Only the permissions changed.

And that raises an uncomfortable question:

Was the agent ever safe, or was it simply configured to behave safely?

This is the difference between safe by configuration and safe by default .

For developers building production AI agents, that distinction matters more than it might initially appear.

The Hidden Problem With Configuration-Based Safety

Most AI agent systems provide some combination of:

Tool permissions

Access policies

Human approval settings

Execution limits

Environment restrictions

Logging and monitoring

These controls are useful.

But their effectiveness depends on how they are configured, maintained, and enforced.

Imagine an agent designed to investigate customer support tickets.

It needs to:

Read…