agent-identity-privilege-reviewer

Identify confused-deputy risks by tracing user-to-agent-to-sub-agent authority flow, verifying privilege attenuation at each delegation hop, and detecting cross-tenant privilege laundering or escalation paths. Compare actual agent scopes against least-privilege needs to flag excess authority.

Audit privilege escalation by mapping each agent to its underlying identity, comparing held scopes against required task scopes, and reviewing dual attribution logs to ensure side effects trace to both the human principal and the acting agent, not just a service account.

Review least-privilege credentials when an orchestrator spawns sub-agents or workers, especially if reusing standing tokens across a fleet. Compare task-scoped credential needs against actual agent scopes to prevent privilege drift and cross-tenant abuse.

Check for shared or ambient credentials by performing an identity inventory that maps each agent to its running identity, then flagging over-broad, shared, or ambient credentials that exceed the specific task-scoped least-privilege requirements.

Confused-deputy review works for cross-tenant delegation by tracing authority flow through delegation hops, verifying attenuation, and detecting privilege laundering. It confirms side effects are attributed to both human and agent principals across tenant boundaries.

Audit logging only shows service accounts when dual attribution checks are missing. Review agent identity architecture to confirm side effects are attributed to both the human principal and the acting agent, preventing obscured accountability in delegation chains.