A suspended user's agent run still wrote a file: an internal pilot

AI · Security · 2026-10-27 17:57

Scopehaven's internal pilot found that permission checks only occur when a request arrives, while AI agents can keep calling tools and writing data during a run. In 14 test cases, 2 still wrote files after the user had been suspended.

Source: scopehaven.dev

Auto-generated summary for reference only. RSS