Tag
The paper proposes a theory of least autonomy as a generalization of least privilege for agentic AI systems, defining compositional blast radius and agent influence graphs to detect authorization composition and cross-domain capability composition.