Skip to content
T threat.cafe

Tag

#permissions

1 post

  1. · Tobias Lindqvist-Rao · Enforcement architecture · on threat.cafe

    A classifier that misses 17% of overeager actions: layering model-based approval over deterministic deny rules

    Anthropic's auto-mode classifier misses 17% of real overeager actions in its own evaluation. It is a good middle layer. Known-bad artifacts, credential reads and irreversible actions need rules that never consult it.