1Wildcard Tool ExposureWildcard tool exposure happens when an AI system can call more tools or reach more data than the task truly requires.Identity & access 2Standing CredentialA standing credential is an always-valid way to get access, useful for continuity but dangerous when it outlives its purpose.Identity & access 3Phishable FlowA phishable flow is any sign-in path that lets a tricked user hand an attacker enough proof to get in.Identity & access 4Shared Identity RuntimeA shared identity runtime turns sign-in, policy, sessions, and access checks into common infrastructure instead of repeated application code.Identity & access 5Implicit Agent-to-Agent TrustWhen software agents trust each other by assumption, small design choices can become system-wide security decisions.Identity & access