trust model
4 posts
Article
The sand was never boxed
A sandbox is a set of filters on named dimensions, not a boundary of execution. It matches references and never revalidates the capability they compose.
Article
Access is the breach
The EU chat control mandate concentrates standing access to private messaging into a single point of compromise that no implementation quality can fix.
Article
Claude Desktop installs silent macOS persistence
macOS grants signed apps install-time trust, then stops validating. Persistence lives in that gap. The trust model is the exposure.
Article
Identity Trust Drift in Cloud Access Control: A Systemic Failure Mode
A systems-level analysis of how static token models in cloud platforms create persistent access risks when identity trust is not reevaluated after initial validation, exposing a fundamental drift between design and operational reality.