Agentic Resource Discovery Still Needs a Verification Boundary
ARD can help agents find capabilities across organizations, but discovery metadata must remain outside the trusted execution boundary.
Tag:Software Security
All the articles with the tag "Software Security".
Selecting Fewer MCP Tools Is Not the Same as Enforcing Least Privilege
GitHub MCP tool filtering reduces context and accidental capability exposure, but real least privilege also requires identity, authorization, and effect controls.