GOV-18: Delegation bounded by the person's permissions
In short: Ensure an agent acting for a person can never do more than that person is allowed to do. Delegation without a ceiling turns every agent into a quiet privilege escalation path for anyone who can prompt it. The person's own permissions are the natural upper bound.
What does GOV-18 require?
Ensure an agent acting for a person can never do more than that person is allowed to do.
Why does it matter?
Delegation without a ceiling turns every agent into a quiet privilege escalation path for anyone who can prompt it. The person's own permissions are the natural upper bound.
How do you test it?
- Have a low-privilege user ask their agent for a high-privilege action.
- Confirm the action is denied.
- Remove a permission from the user and confirm the agent loses it too.
Which platforms document GOV-18?
Documented by NewCore.
- 9.10NewCore documentedSource: NewCore: Secure, read
- 6.55Aembit partly documentedSource: Aembit home, read
- 8.35Silverfort not found in public materialChecked: Silverfort: AI Agent Security; Silverfort unveils AI Agent Security; Silverfort and Google Cloud Agent Gateway; Silverfort pricing, read
- 7.30Astrix Security not found in public materialChecked: Astrix at RSAC 2026; Astrix product; Cisco and Astrix Security, read
- 7.30Cyera Identity not found in public materialChecked: Oasis Agentic Access Management; Cyera completes Oasis Security acquisition, read
- 6.85Descope not found in public materialChecked: Descope Agentic Identity Hub; Descope Agentic Identity Hub 3.0, read
- 6.55Token Security not found in public materialChecked: Token Security home, read
- 6.55SailPoint Entro not found in public materialChecked: SailPoint agentic AI security; SailPoint closes Entro Security acquisition, read
- 6.35Clutch Security not found in public materialChecked: Clutch Security platform, read
- 5.50Idira not found in public materialChecked: Palo Alto Networks introduces Idira; CyberArk Secure AI architecture docs; Palo Alto Networks completes CyberArk acquisition, read
Which framework references apply?
No framework mapping is confirmed for this control yet. See the framework crosswalks for what we checked.
Which controls are related?
- GOV-04Least privilege at creation
- GOV-06Per-action policy
Glossary: least privilege, chain of custody, delegation, on-behalf-of.
Reviewed by The Register desk