# Permissions, agents and untrusted text

Lesson 2 of [Review AI delivery risk and plan the handover](https://aiagencies.fyi/academy/review-ai-delivery-risk-and-handover.md), 14 minutes.

An AI system can read, draft and act. Each of these needs a separate rule. Apply permissions before retrieval A knowledge assistant should retrieve only from approved documents. It must apply the user's document permissions before retrieval. It should show the supporting passages. When the evidence…

The rest of this lesson is for learners enrolled in the course. [See how Review AI delivery risk and plan the handover works](https://aiagencies.fyi/academy/review-ai-delivery-risk-and-handover.md).

Also on the [web page](https://aiagencies.fyi/academy/review-ai-delivery-risk-and-handover/permissions-agents-and-untrusted-text).