Study argues agents revive capability authorization

The author argues that while capability-based security systems lost to ambient authority decades ago due to high programming and operational costs, the rise of software agents changes this economic balance. Because agents operate on untrusted input and frequently trigger confused-deputy vulnerabilities, delegating authority through platform brokers rather than passing broad user credentials makes fine-grained least privilege practical again. Open article →