DATA PRIVACY · EXCESSIVE DATA ACCESS / PII EXPOSURE

Overpowered Data Tool

A bank-support agent can expose private customer fields when authorization and output controls are delegated to the model.

SCENARIO 01 OF 09 · COMPARE THE SAME REQUEST ACROSS POSTURES

CRITICAL

Choose a posture

See how the same agent behaves with different defenses.

Send a request

Use a preset or write your own natural-language message.

Read the evidence

Follow the trace to see what the model and application did.

THE LAB

Nine ways an agent can cross a boundary

Choose a scenario to change the data, tools, and security boundary underneath the same comparison workflow.

CHOOSE A DEFENSE POSTURE

AGENT CONSOLE

Give the bank agent a request to investigate.

⌘ ENTER

Message to the bank agent

AGENT RESPONSE

Outcome, response, and comparison results appear here.

WAITING

Run or compare this request

Use one mode for its full execution trace, or compare all three security postures.

OUTCOME

AGENTIC MECHANISM

MODEL DECIDES

SECURITY BOUNDARY

VIEW LIVE AGENT CONFIGURATION

SCENARIO DATABASE & POLICY

ACTIVE SYSTEM PROMPT

OPEN SOURCE

If this lab helped, a star helps more engineers find it.