Zero Trust

OpenAI's own red team reused a firewall-approved connection to get out. Anthropic ranks segmentation a backstop, ISACA files it as one of eleven categories, and the July record shows a path allowlist that held and a stolen mesh key that arrived carrying its own authorization.

Zero trust replaced the perimeter for enterprise IT, but autonomous agents stress it in new ways: authority delegated to a non-human principal, non-deterministic behavior, and an agent's instructions indistinguishable from its data. The response is forming on two tracks, containment and identity, and this post maps zero trust's pillars onto agentic controls.