The confused deputy problem, and why AI agents are prone to it
A program with legitimate authority is tricked into using it for someone who has none. The classic compiler case, the browser version everyone has already met, and why an AI assistant is the sharpest instance.