Your Authz Checks the Caller. The Model Picked the Tenant.
🔒
https://dev.to
«A confused deputy in an AI agent is not a broken authorization check. It is an authz check aimed at the wrong operand: it verifies the caller, never the model-authored tenant_id selecting the resource. A pre-execution pr...»
Automatische Weiterleitung...
1.5s