Unverified50% confidenceDecision RuleExact time
Every use of a credential by an agent should leave a record (which secret, when, and for which task); credential authorization without logs amounts to giving up the chance to discover anomalies after the fact.
1
Sources
50%
Confidence
Long-term
Relevance
10/17/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedAuthorizing at the start of a workflow is not sufficient to prove that every downstream operation was authorized, because each delegation may introduce new principals, capabilities, destinations, or data exposure surface.66% similarUnverifiedIf a customer has signed data processing terms, sending records to a model vendor may or may not be covered; this must be clarified before building, and when not covered, options include zero-retention vendor terms, specific processing regions, self-hosted models, and stripping sensitive fields before calls.66% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1052398API
curl https://kongchang.com/api/v1/knowledge/claims/1052398MCP
get_claim(id=1052398)