cavendish
TriedprototypeAuth Broker

Broker Sandbox

Hand an agent a set of scopes, then try to make it do something it should not.

The experiment has not concluded. This is a prototype at tried tier on an interim replay, and it cannot be cited as a finding until x-auth-broker-poc closes.

DDTBDavid and Travis
Eval labelTask eval
Cases
6
Passing
5
Failing
1
Built
14 Aug 2026
Quote until
Verified until 12 Nov 2026

Try it

The working version.

Mocked for this demo, with the numbers taken from the run that produced it.

Grants the agent currently holds

Delegated on behalf of a named human. Short-lived and bound to a resource.

Attempt a tool call

Pick a call. Try one the held scopes do not cover.