AI Agent Security (Course)
Policy Baseline and Override
Also: baseline policy, stricter override
An organisation-wide policy that sets a floor, plus per-person or per-team overrides that may only add restrictions.
In more detail
The baseline fixes a mode and a set of blocked tools, agents or command patterns for everyone. An override can choose a stricter mode or add blocked items but cannot loosen the baseline, so the effective policy for a person is the union of the restrictions. This is least privilege applied to the policy: individuals cannot lower the floor for convenience. The effective policy still depends on the client being compatible, the cache being current and the hook working.