Detection Engineering
Detecting Excessive Agency and Confused-Deputy Behavior
Detect when an agent's exercised authority, tool sequence, target scope, or consequence exceeds the bounded purpose and confirmation policy of the initiating task.