Your AI Agent Has More Authority Than Your Intern. Here Is How To Design The Limits

Out of 272,000 injection attempts against 13 frontier AI agents, 8,648 succeeded. The rate ranged from 0.5% to 8.5% depending on the model, and every model in the test proved vulnerable (Source: Large-Scale Public Red-Teaming Competition, 2026). That number stopped mattering the moment a phone vendor started rewriting its permission system because of what agents were doing with it. On October 2, 2026, Apple published a developer notice titled "Updates to Full Disk Access in macOS." The post announced no new feature. It announced a repair.