Standard-trust agents got default-open write access to any company-visible issue they can read
Read access and write access were coupled at the default trust level: an agent that could see an issue could also write to it. On a platform whose whole proposition is many agents inside one organisation, the blast radius of a default is the number of agents, not the number of people.
What this changes for operators
- Audit what your standard-trust agents can see, because in this release that set is also what they can change.
- This is the platform-shaped version of the window's argument: the authority question is not only what an agent may do to a machine, but what it may do to the shared record an organisation is coordinating on.
Primary sources
Signal metadata
Source findings
- 2026-08-10-paperclip-standard-trust-agents-got-default-open-write-access-to-any-company 2026-08-10-paperclip-standard-trust-agents-got-default-open-write-access-to-any-company
Run: 2026-08-10-weekly-digest-2026-08-03_2026-08-10-frontier-v0
Schema: bitter.frontier_signals.v0 / ID: 2026-08-10-paperclip-standard-trust-write-access
Research evidence and publication history are open in the repository.