systems failure
4 posts
Article
OAuth converts consent into standing permission
OAuth 2.0 issues a token, not an identity. It verifies authority once at consent and honours the reference thereafter, without ever revalidating the grant.
Article
Palantir was blacklisted for working exactly as designed
Spain's Palantir blacklist is not about capability. It is what happens when a system executes trust granted once and never revalidates its lawful basis.
Article
The role tag is a label, not a lock
Prompt injection is not a bypass. It is the transformer resolving the whole context window as one sequence, trusting a role label it never enforces.
Article
The valet's key still opens your Civic
How a Honda Civic keeps granting access long after the conditions of trust expire, and why reference replaces verification across systems.