AIDR Runtime Security Notes

Agents inherit user privileges and act through local tools, files, credentials, and network access. Endpoint runtime evidence is therefore the earliest practical place to observe behavior and apply validated controls.

A new model, tool, endpoint, or call pattern is a signal for investigation. The decision must return to session evidence and affected scope before a response policy is applied.

A response control exists only when the host protocol can reliably deny, preserve audit evidence, recover from failure, and pass compatibility tests. Roadmap controls should never be marketed as current enforcement.