TLDR Tech / IT
From Zero Trust to Zero Custody
Zero Trust is insufficient for AI agents because verifying identity does not stop attackers from hijacking behavior through malicious language in context. Zero Custody holds that the reasoning loop should hold nothing that matters, so a compromised agent has empty hands. Secrets and raw values should stay with external brokers or gateways that inject or re-identify them only after policy checks.
Read the full story