Delegation chains can accidentally lose the original user's authorization context.
MULTI-AGENTAI SECURITY ENGINEERING
Delegation & confused deputy risk
A trusted agent can be tricked into using its authority on behalf of a less-privileged requester.
A low-privilege agent asks a privileged remediation agent to perform an action it could not perform directly.
Which security control should be explicit?
REMEMBERAuthority must travel with the request.
No uploads · No company data · No account required