Whose Instructions Is Your Digital Worker Following?
A digital worker can have legitimate access and still be persuaded to use it for a person or purpose you never authorized.
- authorization-notes
- digital-workers
- prompt-injection
- delegated-authority
Writing
Technical notes and case studies from Ratify Protocol on portable delegated authority, verification, and integrations across agent trust boundaries.
A digital worker can have legitimate access and still be persuaded to use it for a person or purpose you never authorized.
Enterprises are learning to authorize AI agents one action at a time. The harder problem is giving the next system evidence it can verify for itself.
As digital workers begin acting on our behalf, identity alone will not be enough. We will also need portable, verifiable permission.
Agent Relay and Ratify Protocol completed a local integration spike examining whether delegated authority could cross an organizational and agent-runtime boundary without requiring either platform to trust the other's internal logs.