RBAC BREAKDOWN
INPUT · AUTHORIZED SET
A
B
X = { A, B }
reads on behalf of A
ANY AI CLIENT
acts with A's access
sends to C
C
Y = { A, C }
⚠ RBAC VIOLATION
C can now read a doc it
was never granted