mirror of
https://github.com/mcloh/Enterprise-MCP-Service-Bus.git
synced 2026-11-06 06:24:12 +00:00
570 B
570 B
ADR-004: Agentic context never elevates privilege
Status: Accepted.
Source: this ADR is the canonical record of this decision. For implementation and validation context, see RI/docs/AS-BUILT.md and, where applicable, the relevant contract in RI/docs/interfaces/.
Context
Can agentic context elevate privilege?
Decision
Never — context can only subtract (Context may subtract, must never add).
Alternatives Considered
Allowing elevation based on the model's "confidence."
Consequences
EP-15 tests (Test 3/4) validate the invariant.