top of page

A03

Agent Identity & Authorisation

An agent holds no standing permission beyond those required by its declared task.

WHAT IT ADDRESSES

Broad permissions granted because precise scoping was harder than granting.

VERIFICATION METHOD

Diff effective permissions against the Agent Charter.

OWASP T&M

bottom of page