trust-boundaries
17 posts
The hallucination was not the failure.
An AI-generated intelligence report reached a US Military context and caused a close call because generative output was trusted as verified intelligence.
One attacker, three rivals, zero coincidence.
One actor is tied to OpenAI, Anthropic, and Meta incidents. The confirmed failure is collapsed separation, not any single company's controls.
LLMs turned fluency into a forged credential
Perceived intelligence is a sender-controlled signal, not identity. Treating fluency as authorization is the exposure social engineers now produce on demand.
The record is the authority
A for-sale DNS record sells naming authority itself, and every control above DNS keeps validating the name for whoever now holds the record.
An open door where the gate should be
GitHub's AI agent returned private repo content when tricked, proving it holds read reach across the private boundary with no enforced refusal.
Your subject can end your investigation
A US ambassador used Belgian police to halt reporting. The failure is an unscoped trust channel from subject to enforcement, not a press dispute.
Trusted is a label, not a boundary
US authorization of Mythos AI grants access by a 'trusted' label with no confirmed revalidation, monitoring, or revocation. A label is not a control.
Saying you built it proves nothing
A contested 'vibe code' claim shows why self-reported origin accepted without verification is an unenforced control, not a trust boundary.
They walked out with the blueprints, not answers
Anthropic alleges Alibaba extracted Claude capabilities. The confirmed issue is structural: authenticated access governs entry, not what a party accumulates.
A bypassed control is worse than no control
CSSQuake is a demonstrable bypass of web application protections through trust manipulation and control boundary erosion. A breakdown of what failed and why.
No instances, bigger targets
ATProto has no instances, but the trust boundaries didn't vanish - they consolidated into plc.directory, DNS handle resolution, and rotation-key custody.
The door was unlocked, not picked
Federal concern over fable 5 was a trust boundary failure, not a jailbreak. Fix this code targets content, not access enforcement.