NEW

Start with the pressure: sales, launch, abuse, agents, data, or guardrails

AUTH-03

Authority to Control Chokepoint

A small change to permission, approval, or action scope can break several unsafe authority paths.

chokepoint

AUTH-03

Authority to Control Chokepoint

A small change to permission, approval, or action scope can break several unsafe authority paths.

Several authority paths converging on overbroad permission, followed by a constrained policy and approval gate that blocks or reduces the paths.

User to agent toactionAgent to tool toexternal effectService identity totoolSHARED WEAKNESSSharedauthorityweaknessCONTROLSelectedcontrolUser path blockedAgent pathblockedService pathconstrained withresidual reviewAuthority pathretest
Path blockedReduced, not eliminatedPending retest