The Confused Deputy Problem in AI Agents: Why Ambient Authority Destroys Enterprise Security

13 October 2026

An AI agent running on a master service key can be talked into fetching data its user is forbidden to see. Delegated, ephemeral, data-layer-bound authorization closes the gap that prompt guardrails can't.