Agent Identity, Authorization, and Prompt-Injection Defense: Build a Sensitive-Action Gate
A prompt can ask a model to book a hotel. A prompt cannot grant the legal or technical authority to spend a client's money, read another customer's trip file, or export passport records. Those decisions belong to authenticated identities, resource policies, delegated permissions, and application-...
