AAO-002 / Data, Technology, and Security
Preventing Supplier Content from Redirecting Trusted Agent Actions
Outsourcing security managers should test whether untrusted supplier content can cause a trusted agent to act outside its mandate. The test must follow content through retrieval, memory, tool selection, and the final business action.