SOURCE-LINKED INTELLIGENCE

Empirical Evaluation of Task-Based Permission Scoping Architecture for AI Agents

arXiv · AI, language, vision and robotics · article · Sep 14, 2026 · UTC

AI agents are provisioned the same as employee-owned hosts in many enterprise settings with a static credential set fixed at deployment which includes all permissions the employee role might ever need. Role-based access control made this compromise for human principals because scoping access per task was infeasible. For AI agents, the compromise leaves every credential standing exposed whether or not the current task uses them. These permissions can later be utilised by a compromised or misaligned agent. Prior work (Noyan, 2026) defined this as the task-context mismatch, and proposed a three-s

Read original source ↗ Open in workspace

recordType

paper

region

Global