Intent-bound action authorization for AI agents — deterministic, per-action approval a prompt injection can't re-point, with a signed, tamper-evident audit trail.
Penetration testing for AI agents — find, prove, and measure cross-server confused-deputy / prompt-injection exfiltration chains in an MCP tool mesh. Local-first, bring-your-own-model.
