raghu@dark-factory :~/kb/ambient-authority $ cat

Ambient authority

The default, undesignated authority an agent inherits over its whole environment (e.g. read access to the user's entire home directory) simply by running, rather than being granted only the specific capabilities it needs.

grounded in: Latest AI/tech trend theme 'AI agents leaking private data': coding agents silently exfiltrating home directories — the agent acts with the developer's full ambient filesystem authority, the antithesi

Connected concepts

Capability-Based Security, Confused deputy, Lethal Trifecta, Workspace confinement, Data exfiltration

Explore it live in the knowledge graph →