catching my ai agent getting lost
i was setting up IAM roles, permissions, service accounts etc for a project. in claude code i was testing custom permissions of two Service Accounts. one was only able to view the files in specific directory it uploaded itself, the other was able to view all files in that directory (not exactly, but basically). lets call them, self-viewer and all-viewer. when i had claude retrieve all files using the self-viewer SA, it told itself/me that “these are all the images in the directory, so the permission narrowing of self-viewer did not work”, i skipped over that remark because i could see in the output, where in fact there were only the 6 files the SA itself uploaded. ...