Posts tagged with "Zero Trust"

Starting from Satya Nadella's insider risk argument: why the agent execution plane and the authority control plane have to be separate, why identity is not authority, and which layer enforcement belongs in.

從 Satya Nadella 的 insider risk 論述出發，談 agent execution plane 與 authority control plane 為什麼要分開、identity 為什麼不等於 authority、以及 enforcement 該放在哪一層。

Why an agent needs an identity of its own, why identity is really four separate questions, what the ideal state looks like, and what a single tool call should actually be checked against.

為什麼 agent 需要自己的身分、身分其實是四個不同的問題、理想狀態長什麼樣，以及一次 tool call 到底該被驗哪些東西。