Source
Y Combinator Startup Podcast — How To Build Superintelligence Inside Your Company (May 27, 2026) ·
at 4:38 ▸ ·
at 6:45 ▸
When this applies
when deciding how much scope/access to grant any new autonomous tool or employee
The takeaway
Excessive safety-driven restriction often costs more in lost capability than it saves in prevented harm, especially in high-trust environments.
Why it works
Narrowly scoped tools constrain what an agent can usefully do; broad access lets it synthesize across all available context to answer arbitrary, previously-unaskable questions.
One level up
Worry less about worst-case misuse and more about enabling best-case capability when the environment is high-trust.
Where it stops holding
This stops working when the environment is low-trust, externally facing, or when the cost of a single misuse event is catastrophic rather than recoverable.
Detail
rule: When tool scope frustrates an agent's usefulness, consider granting much broader access rather than incrementally expanding narrow permissions.
threshold: Tried narrow tools first, found them insufficient, then jumped to full database access 'late at night' as an experiment.
rationale: It turns out that the thing that was hampering the world was being worried about security and privacy and all the things that could go wrong; worrying less reveals unbelievable power.
In their words
So I was like, what if we just gave the thing like access, complete access to the production database where it could just like trample on anything?