ended7월 26일· 1 sources
Your Authz Checks the Caller. The Model Picked the Tenant.
Why it matters
A confused deputy in an AI agent is not a broken authorization check. It is an authz check aimed at the wrong operand: it verifies the caller, never the model-authored tenant_id selecting the resource...
1
Sources
+0
24h
—
Growth
57d
Active