{
  "id": 19599434,
  "title": "An AI Agent Can Stay Within Its Permissions and Still Do the Wrong Thing",
  "url": "https://urgent.news/2026/11/12/an-ai-agent-can-stay-within-its-permissions-and-still-do-the-wrong",
  "topic": "ai",
  "section": "AI",
  "published": "2026-11-12T04:31:53.000Z",
  "source": {
    "name": "Dev.to",
    "slug": "dev-to",
    "url": "https://dev.to/axec/an-ai-agent-can-stay-within-its-permissions-and-still-do-the-wrong-thing-1l72"
  },
  "original_language": "en",
  "account": null,
  "summary": "The first authorization check is often the least important one. A user asks an agent to update a supplier record. The request is approved. The agent has permission to read the supplier system and write changes. Then the plan changes. The agent decides it needs to export related payment details, call a second system, or update several records instead of one. The original authorization may still be…",
  "key_points": [],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}