Unverified50% confidenceDecision RuleExact time
The core principle of Agent security is that identity and authorization must come from a trusted session context and must never come from the model's output.
1
Sources
50%
Confidence
Long-term
Relevance
9/24/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedThe Agent governance approach is highly aligned with the zero-trust architecture philosophy in enterprise security, meaning no entity is trusted by default and every action is independently verified.74% similarUnverifiedAgents possess the ability to actively execute code and access external services, requiring protection against Prompt Injection attacks and privilege escalation.74% similarUnverifiedCredentials should be bound to execution rather than to the Agent, and what the Agent receives should be a restricted token rather than a master key.74% similarUnverifiedThe core design principle of the Delegated Agent Sessions mechanism is that the permissions of an agent session are simultaneously constrained by both user permissions and the agent definition.73% similarVerifiedAgent的核心公式为：Agent = 大模型 + 工具调用 + 自主决策能力73% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/948295API
curl https://kongchang.com/api/v1/knowledge/claims/948295MCP
get_claim(id=948295)