separation-of-duties
What is your AI agent actually allowed to do? Finds limits an agent can slip past by combining individually permitted actions, and flags releases that widen its reach.
Unix chmod-inspired permission model for cryptographic operations
