Calendar access alone is not enough for an AI agent: Open Instinct developers propose limiting response data

The developers of Open Instinct propose 3 checks: verify the sender's identity, check their permission to perform the operation, and filter the response fields.

For scheduling a meeting, they suggest returning only free and busy time slots, without event titles, attendees, or descriptions.