Ambient authority
The default, undesignated authority an agent inherits over its whole environment (e.g. read access to the user's entire home directory) simply by running, rather than being granted only the specific capabilities it needs.
grounded in: Latest AI/tech trend theme 'AI agents leaking private data': coding agents silently exfiltrating home directories — the agent acts with the developer's full ambient filesystem authority, the antithesi
Connected concepts
Capability-Based Security, Confused deputy, Lethal Trifecta, Workspace confinement, Data exfiltration
Explore it live in the knowledge graph →