Bounding what the agent may do
Eighteen months of CVE records, vendor security advisories, specification arguments and shipped enforcement code show how the industry actually bounds agent authority: a deterministic envelope the model cannot…
What surprised meIn four of seven CVE-grade incidents the human-approval gate was never fooled and never even shown; it was re-bound, because the thing the gate check…