From Hardy’s Compiler to Hardy’s AI Agent: When the Threat Model Changes, the Confused Deputy Returns

nicola.gallo@nitroagility.com (Nicola Gallo) — Sat, 25 Jul 2026 00:00:00 +0000

From Hardy’s Compiler to Hardy’s AI Agent.

What is claimed. This article isolates one problem: preserving the binding between delegated authority and the execution for which it was granted, across time and concurrent execution — essentially, authority propagation.

The creation of authority is presupposed here, not re-examined. A principal may authenticate through OIDC, for example, and initial authority may be established through an OAuth-based system or another authorisation mechanism. This article begins when that authority must be propagated across later execution boundaries.

Capabilities on

From Hardy’s Compiler to Hardy’s AI Agent: When the Threat Model Changes, the Confused Deputy Returns