PROFESSIONAL PRACTICE AND COLLABORATION

WORKING WITH SECURITY, LEGAL, AND OPERATIONS TEAMS Security, legal, and operations colleagues are partners, not obstacles. A security reviewer wants to know what the agent can read, what it can change, and what happens if it is tricked. Prepare for that review by keeping an up-to-date list of every tool, every permission, and every outside connection. A legal or compliance colleague wants to know what data the agent touches, how long it is kept, and who can see it. An operations colleague, sometimes called a site reliability engineer, wants to know how the system is deployed, how it is watched, and what to do at three in the morning when it breaks. Give each of them a short, plain document written for their questions rather than for yours. When you involve these teams early, their advice shapes the design cheaply. When you involve them late, their objections arrive as expensive rework.