The development
CodeAnt reported that an approved composite action could continue after focus moved from an approved application to an unapproved terminal.
The authority gap
Approval of one recipient or effect is not transferable to another. A material target change invalidates the approval.
The Authrizd approach
Authrizd binds approval to principal, mandate, target, operation, material parameters, constraints, expiry and an exact-effect commitment.
Enterprise implication
AI capability should not silently expand enterprise authority. Consequential effects should be independently adjudicated and evidenced before execution.
Sources
https://codeant.ai/security-research/claude-code-computer-use-hold-key-bypass
NEXT STEP