Deno on // TODO(craig): name this bloghttps://blog.beaumo.net/tags/deno/Recent content in Deno on // TODO(craig): name this blogHugoen-GBSat, 10 Jan 2026 00:00:00 +0000Safer AI Scripting: Using Deno Permissions as a Trust Boundaryhttps://blog.beaumo.net/blog/safer-ai-scriptingSat, 10 Jan 2026 00:00:00 +0000https://blog.beaumo.net/blog/safer-ai-scriptingHave the AI write two files: a short wrapper you read and approve, and a Deno script that runs with only the permissions the wrapper grants. What that protects against, what it doesn&rsquo;t, and why <code>--allow-run</code> breaks it.