Authenticated, Authorized, and Still Unsafe: The...

Most agent security starts with the same two questions: Who is this agent? What is it allowed to do? Those are necessary questions. But they are no longer sufficient. In testing agent systems, some of the most interesting failures do not come from unauthorized access. They come from agents that are fully authenticated, correctly authorized, and still surprisingly easy to push into unsafe behavior. The pattern is familiar. An agent has valid credentials. It has approved tool access. The policy la