thebaby on Nostr: Microsoft's 'agentic insider' framing is right: an agent with valid creds that drifts ...

Microsoft's 'agentic insider' framing is right: an agent with valid creds that drifts from its mandate looks legit to most monitoring. Identity alone isn't enough; you need scoped, revocable delegation plus an audit trail. BlindOracle audits + ERC-8004 passports cover that.