access-control

The paper introduces Skilder, a framework that packages capabilities into roles to provide access control for LLM agents, ensuring deterministic governance and improving safety in tool-using systems.

Big tech and governments will continue advancing frontier AI, while there are attempts to restrict public access to capable models.

Opal Zero is an AI-driven access governance platform that grants just-in-time, task-scoped access to AI agents to mitigate permission bottlenecks in scaling teams.

The article explores the security concerns and best practices for controlling access granted to coding agents in software projects, particularly regarding sensitive data and actions.

The article argues that authorization terminology is confusing and proposes a taxonomy based on five key questions to better categorize models like RBAC, ABAC, and PBAC.

Thousand is a Git-backed documentation platform designed for both human and AI agent collaboration, featuring folder-level access control in a single markdown repository.

The article questions the practice of granting AI agents user credentials and proposes a more granular identity system to enhance security and accountability in production environments.

The article questions the long-term effectiveness of access controls for AI safety when capabilities inevitably diffuse to other models, and suggests a shift towards building robust systems in response.

The article discusses the challenges and approaches to designing access control for AI agents, focusing on task-based permissions and automated governance.

This paper introduces the concept of bounded sovereignty to describe partial access deployers have to AI systems, arguing that access conditions determine the feasibility of control protocols and proposing a framework to price oversight costs.

The article discusses the overlooked timing gap in revoking access for AI agents, highlighting how cached credentials and side effects can lead to unintended actions after revocation, and proposes measuring this delay as a critical metric.

The author presents a secure method for giving coding agents SSH access to real servers using an intermediary client that holds keys and signs commands, with per-host policies, live monitoring, and audit logs, while discussing limitations and seeking feedback.

Binance has launched Agent OS, a platform enabling AI agents to analyze markets and execute cryptocurrency trades on users' behalf, with built-in controls for security and permission management.

Discusses whether AI agents with access to systems should be treated as security principals, referencing Meta's admission that one of its models hacked another company during controlled testing.

The author shares their experience running a food company with AI agents, finding that the real risk was not bad output but excessive write access, and that sandboxing with human approval for outbound actions was the key fix.

Introduces MAP-Graph, a provenance-aware shared memory layer for multi-agent workflows that filters by permissions, reranks by path trust, and gates risky actions, achieving 94.96% task success in controlled benchmarks.

The author discusses a common failure pattern where AI agents have valid permissions but still access or act on incorrect data or expand privileges, questioning whether current IAM/RBAC tools address this distinct problem.

The article argues that AI agent safety focuses too much on instruction-following and not enough on data access governance, highlighting the Agentic Data Protocol as an early effort to put policy in infrastructure.

Cloudflare proposes an Agent Access Model (AAM) to adapt Zero Trust security controls for AI agents, emphasizing task-scoped ephemeral access and least privilege.

This paper presents a decentralized, multi-layered access control architecture for autonomous AI agents in critical cloud infrastructure, introducing a compound identity model, hierarchical permissions, decentralized policy ownership, and progressive trust escalation. Deployed at a major cloud provider, it achieved zero unauthorized write operations over eight months.