A blog post: Authenticated Doesn't Mean Safe: Why AI Agents Need Action-Level Security.