Least-Capability Access — Glossary — ThinkLLM