Challenge 01 β Objective & Autonomy Risk
Reproduce the 'unintended path' safely, threat-model it with OWASP LLM06, constrain the objective, and map where human-approval brakes belong.
Reproduce the 'unintended path' safely, threat-model it with OWASP LLM06, constrain the objective, and map where human-approval brakes belong.
Treat the agent like a digital employee: design least-privilege identity, cut standing permissions to Just-in-Time, and shrink the blast radius with a before/after diagram.
Protect data even after an agent gains access, and design runtime behavior monitoring that watches tool calls, access requests, and escalations β not just outputs.
Capstone: design human-approval gates, a kill-switch runbook, and access-revocation processes, then integrate 01β03 into a board-ready executive readout.