Untrusted Executions
From Hardy’s Compiler to Hardy’s AI Agent: When the Threat Model Changes, the Confused Deputy Returns
reading time: 72 minutes
What is claimed. This article isolates one problem: preserving the binding between delegated authority and the execution for which it was granted, across time and concurrent execution — essentially, authority propagation.
The creation of authority is presupposed here, not re-examined. A principal may authenticate through OIDC, for example, and initial authority may be established through an OAuth-based system or another authorisation mechanism. This article begins when that authority must be propagated across later execution boundaries.