Why not just have a limited set of permissions for what commands can originate from a given email address?
The original email address can be included along with whatever commands were translated by the LLM. It seems easy enough to limit that to only a few simple commands like “create todo item”.
Think of it this way, what commands would you be fine to be run on your computer if they came from a given email address?
Why not just have a limited set of permissions for what commands can originate from a given email address?
The original email address can be included along with whatever commands were translated by the LLM. It seems easy enough to limit that to only a few simple commands like “create todo item”.
Think of it this way, what commands would you be fine to be run on your computer if they came from a given email address?