The Stochastic Deputy: Structural Tenant Isolation for Tool-Using LLM Agents
Multi-tenant tools commonly accept a tenant identifier and validate it against the caller's entitlement. For a large language model (LLM) agent, that pattern delegates resource selection to a process whose context may contain attacker controlled instructions. We formalize this stochastic deputy problem and present a st...
Mirza Samad Ahmed Baig, Syeda Anshrah Gillani, Asher Ali et al.
· 0 citations