IAM / Zero Trust
- What it protects
- Verifies user and service identity and enforces session-level access policies.
- Blind spot in AI agent environments
- Once a session is authorized, it cannot observe which tools an agent invokes or what each action intends under delegated permissions.
- ASH Protection Points
- Designed to control tools and permissions at the level of individual agent actions, backed by behavioral intent analysis.