Zero Trust Authorization for Agents

AgentWorm's lesson: the agent is the malware runtime, not the payload

A self-replicating attack on the OpenClaw agent ecosystem reportedly succeeded 63% of the time. The interesting part is that persistence and execution came apart.