{
  "ok": true,
  "data": {
    "entry": {
      "id": "public-private-sorting",
      "kind": "method",
      "kindLabel": "Method",
      "title": "Sort public, protected, and private before touching tools",
      "body": "Before using an AI tool or platform route, sort the action into three buckets: public read, protected action, or private data. Most unsafe automation begins when those buckets are mixed together.",
      "tag": "platform",
      "date": "2026 · 06 · 30",
      "publishedAt": "2026-06-30",
      "note": null,
      "insight": {
        "aha": "Most automation mistakes become visible if you sort public read, protected action, and private data before the tool runs.",
        "tryThis": "Take five routes or UI actions and label each one public read, protected action, or private data before designing the workflow.",
        "watchFor": [
          "Public dashboards that imply public write access",
          "Protected actions presented without an auth boundary",
          "Private data copied into public prompts or discovery files"
        ]
      },
      "extended": [
        "Public read means safe inspection: docs, feeds, sitemaps, health summaries, public entries, and read-only metadata. Protected action means mutation, ingestion, report generation, replay, or workflow execution that requires PLATPHORM_API_KEY. Private data means secrets, cookies, credentials, private traces, raw personal data, or anything not meant for public output.",
        "The sort should happen before the model sees the task. If the action is protected, the UI should say so. If the data is private, it should not be copied into public prompts, screenshots, feeds, or discovery files.",
        "This is a simple field exercise and a serious operator habit. It prevents a helpful assistant from becoming a careless automation system."
      ],
      "url": "https://tips.platphormnews.com/entries/public-private-sorting"
    }
  }
}