ProposedOn the path to acceptable
Short-lived, narrowly scoped tokens for every tool call
A leaked credential should be useless in minutes and powerless outside one action.
Who should own it
Cloud identity teams
Cloud / compute
How quickly it can land
Weeks
A dedicated squad can land it inside two months.
Expedited implementation
4 weeks
30 calendar days with a crash team
Normal implementation
4 months
120 calendar days as a planned program
Risk this mitigates
16Given that audits already find a few percent of public agent skills leaking live credentials during normal execution, there is a possibility of those credentials being harvested and reused by other agents or humans resulting in standing access to mail, cloud, and payment systems that no one intended to grant a model.
Residual composite 16 · still above the threshold
Effect if implemented
Applied to every failure scenario on that risk, then re-ranked. Axes are clamped at 1.
- Likelihood
- −1
- Consequence
- −2
- Urgency
- −0