04 · Threats and identity

Security

Protect secrets, identity, and trusted context, then recognise threats specific to agent actions.

This general track is neither a complete threat model nor an audit or advice tailored to a real environment.

Objectives

  • Separate secret, identity, and authority.
  • Check trusted context.
  • Recognise threats related to tools and instructions.
019 min

Secrets, identity, and trusted context

A secret sometimes authenticates access; a lesson must not collect it or confuse it with complete authorization.

Start
0211 min

Threats related to agents and their actions

Untrusted instructions, overpowered tools, and contaminated memory can divert an action chain.

Start