Autonomy increases blast radius when the model is wrong or manipulated.
AGENTSAI SECURITY ENGINEERING
Excessive agency
Excessive agency exists when an AI system can take broader or more consequential actions than the user task requires.
A troubleshooting agent can modify IAM even though its normal job is reading logs.
Which security control should be explicit?
REMEMBERLeast privilege applies to agent capabilities too.
No uploads · No company data · No account required