IDENTITY & ACCESS SECURITYPROPOSED STUDY
Who gave the agent that permission?
Explore excessive privileges and authorization boundaries across agent tools and service identities.
PLANNED LAB · NOT YET COMPLETEDThis is a proposed lab brief. Findings, evidence, and reproducible steps will be added after the work is completed.
The question
Can an agent use a permission that its current task should not require?
The lab
Local mock services with separate test identities and synthetic resources.
What the work will produce
- An identity and permission matrix
- Tests across user, service, and agent boundaries
- A least-privilege policy proposal
This is a proposed lab brief. Findings, evidence, and reproducible steps will appear after the work is completed.
END OF LAB BRIEFBACK TO RESEARCH ↗