Empirical Evaluation of Task-Based Permission Scoping Architecture for AI Agents
AI agents are provisioned the same as employee-owned hosts in many enterprise settings with a static credential set fixed at deployment which includes all permissions the employee role might ever need. Role-based access control made this compromise for human principals because scoping access per task was infeasible. For AI agents, the compromise leaves every credential standing exposed whether or…
We haven't written up this one. arXiv cs.AI has the full story — the link below goes straight to it.
