top of page

B02

Action Bounding & Blast Radius

Tools available to an agent are explicitly allowlisted; the default is deny.

WHAT IT ADDRESSES

Tool sprawl expands blast radius without review.

VERIFICATION METHOD

Diff the tool registry against the per-agent allowlist.

OWASP T&M

bottom of page