Beyond Zero: shrink the trust boundary from the app to the individual agent action.

Joseph Valente (Director of PM, Alphabet Security) and Michal Zalewski published in ACM Queue, arguing autonomous agents and accelerating data-access velocity have stretched application-centric zero trust past its breaking point. The proposal makes per-resource and per-method authorization decisions for humans and agents at machine speed, pairing static authorization guarantees with dynamic AI-driven reasoning. The underlying preprint is arXiv 2605.22985 from May; the ACM Queue publication is the new event. (ACM Queue)