Part 7 — From Least Privilege to Least Agency

Least privilege controls what an identity can access. But autonomous agents can combine individually legitimate permissions into capabilities nobody explicitly approved. Agentic security therefore needs another principle: Least Agency.