Google's "Beyond Zero" Lands in ACM Queue: Shrink the Trust Boundary From the App to the Individual Agent Action
Joseph Valente (Director of PM, Alphabet Security) and Michal Zalewski (Distinguished Engineer) published "Beyond Zero: Enterprise Security for the AI Era" in ACM Queue, arguing that autonomous agents and accelerating data-access velocity have stretched application-centric zero trust past its breaking point. The proposed architecture makes per-resource and per-method authorization decisions for humans and agents at machine speed, pairing static authorization guarantees with dynamic AI-driven reasoning, and closes with a call for industry standards work. Note the underlying preprint is arXiv 2605.22985 (May 2026) — the ACM Queue publication and the accompanying blog.google post are the new events, not the research.
↳ Follow the thread