Respond (RS) · Authorization
Authorization at the in agent layer
advisory · Bypassable by language alone
How do I stop the bleeding now?
What this cell does
(no enforcement)
Deliberately empty
This cell has no artifact, and that is the argument rather than a gap. At this layer, for this concern, nothing is enforced. Populating it with an enforcement claim would invert what the framework is saying.
Cell notes
Interventions, Authorization / In-agent
Empty by design. Telling the agent "you have no permissions now" through prompts is bypassable through every prompt-injection vector that compromised authorization in the first place. Real intervention lives in ../client-side/ (deny-all hook, immutable bit) and ../server-side/ (Kyverno deny-all, empty Role).
Cite this cell:
https://agenticcovenants.com/respond/authorization/in-agent/