Interrupt the paths.

Multiple attack paths often look distinct at the surface, but they can converge on the same underlying weakness: broad tool access, a shared or overprivileged identity, or the absence of a real approval boundary. In this analysis, prompt and instruction abuse, tool-abuse, and identity-abuse are not separate problems to solve one by one. They are different routes to the same chokepoint, where a single control failure can turn ordinary requests into unauthorized action.

The remediation strategy is therefore to break the chain at the narrowest leverage point: scope identity, tools, and approval policy so each action has a bounded authority path and an explicit gate. When that boundary is enforced, the prompt path is blocked, the tool path is blocked, and residual identity risk becomes easier to retest and contain. The result is not just symptom removal, but a durable reduction in attack surface at the point where multiple abuses would otherwise converge.