# Stage 3: Rules that fit the job

Source: https://tenuo.ai/lab/stage-3

> Write permissions narrow enough that every rogue action is blocked and the trip still books.

Part of the [AI Agent Delegation Security Challenge](https://tenuo.ai/lab/index.md). This stage is interactive: open https://tenuo.ai/lab/stage-3 for its instructions and checks.