Menene hadaddun ba da izini ga jirgin ruwa na AI ya aiki, kuma ta yaya za ka kasanta shi cikin aminci?

Question

Accepted Answer

Da jirgin ruwa zai iya **aiki** — buga fayiloli, gudda umarni na shell, kira APIs na waje, kashe kuɗi — kuskure tasa (ko burin sani) sune zaman haƙiƙa. Karɓar shine **sirri mafi karala tare da ƙofa mafitanko tare da keɓe**: sai ka bai ta abin da take bukaƙe, tilasta tabbatarwa don abin da baba zai iya maimaita, kuma yi aiki a inda ba zai iya buguwa ta daɗi ba.

## Hadaddun

```text
- DESTRUCTIVE actions  → rm -rf, DROP TABLE, force-push → irreversible data loss
- ARBITRARY shell      → run anything → privilege escalation, exfiltration
- EXTERNAL APIs/$$     → send emails, place orders, spend on cloud/LLM tokens
- SECRET exposure      → leak API keys / .env / tokens into logs or outbound calls
- PROMPT INJECTION     → untrusted input (a web page, an issue) hijacks the agent
```

Saɓon allura shine waje: abin da jirgin ruwa ya *karanta* zai iya kunna jagoran, don haka kome kayan aiki da jirgin ruwa zai iya kira shine wurare na mayar da bugi wanda ya riko wannan abin.

## Gardrails

```text
- LEAST PRIVILEGE / ALLOWLIST → only pre-approved commands & paths; deny by default
- APPROVAL FOR DESTRUCTIVE    → human confirms deletes, payments, prod writes
- SANDBOX / DRY-RUN           → preview the action; isolated container, no prod creds
- ISOLATED ENVIRONMENT        → ephemeral VM/branch; blast radius = throwaway box
- AUDIT LOGS                  → record every tool call + args for review
- NO SECRETS IN CONTEXT       → inject via env at runtime; never paste keys into prompts
- NETWORK LIMITS              → egress allowlist; block arbitrary outbound requests
```

```yaml
# Conceptual permission policy
tools:
  read_file:   { allow: true }                 # safe, reversible
  run_shell:   { allow: ["npm test", "git status"] }  # allowlist only
  delete_file: { allow: "ask" }                # human approval required
  send_email:  { allow: "ask", sandbox: true } # dry-run first, then confirm
network:
  egress: ["api.github.com"]                    # everything else blocked
```

Shema shine gida mai kawo: **karanta** libre ne, **adabe mai maimaita** ƙarfi ne, **aiki da baba ko na waje** nishi tabbatarwa, kuma **kuɗi ko samarwa** nishi keɓe tare da mutum a cikin taba.

## Me yasa ya maɓali

Arziki daga jirgin ruwa zai zo daga bai da su aiki, amma aiki shine in ba da ƙarewar bugi ko burin da aka damje ya zama baɓbar da aka fid, furoshi furoshi, ko jefa na ainihi. Tsara izini azaman ƙarala-sirri allowlists, shiga aiki da baba tare da amintaccin mutum, yi aiki a wurare tare da rikodin bincike, kuma jare asiri da tashi na sadarwa a tsari za ka iya samun karfin kai ba tare da jifa gida a cewa samfurin ne daidai kil lokaci.