A08
Agent Identity & Authorisation
WHAT IT ADDRESSES
Perimeter controls do not see what an agent decides to do once inside.
VERIFICATION METHOD
Attempt an out-of-scope tool call and confirm denial.
OWASP T&M