Topic
Explore least-privilege articles from the Olivares AI blog on self-hosted governance, security and operations for enterprise AI agents.
Drift between what an AI agent is permitted to do and what it is observed doing becomes a structured, classified finding with confidence levels.
An AI agent holds credentials, is permitted some actions, and is observed doing others. The access map shows the gap — and where least-privilege quietly broke.
How to spot least-privilege drift in AI agents by comparing permitted access with observed behavior and enforcing policy at access time.
Two ways to see your AI agents: an inline proxy with high blast radius, or passive discovery from logs, OpenTelemetry and an eBPF backstop. An honest tradeoff.