Reading a public website and changing something inside a signed-in account are not the same kind of job.

I wanted an AI agent to collect the first 10 Hacker News stories, explain how it gathered them, and place that work inside my DEV editor.

Save the article as a draft. Do not publish it.

The hard part was not finding the stories. It was giving the agent enough access to finish inside my signed-in account without giving it permission to publish.

That instruction contained two jobs with different access needs: