arxivcs.CRcs.AI2026-07-06
aiAuthZ: Off-Host, Identity-Bound Authorization for AI Agents
AI agents issue tool calls on the basis of text they cannot verify, so any party who controls part of the context can forge the appearance of authority. I evaluate 15 contemporary language models against eight attack scenarios derived from a published corpus of real agent inciden…