2 minengineeringsecurity
An agent needs two credential layers, and they must be mutually exclusive
When you publish an agent other people use, whose account does it act on? There are exactly two right answers, and letting a tool sit in both states at once is how credentials leak between users.
KavelaRead