<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Tool Control Plane on Stack Research</title><link>https://stackresearch.org/tags/tool-control-plane/</link><description>Recent content in Tool Control Plane on Stack Research</description><generator>Hugo</generator><language>en-us</language><lastBuildDate>Fri, 26 Dec 2025 00:00:00 +0000</lastBuildDate><atom:link href="https://stackresearch.org/tags/tool-control-plane/index.xml" rel="self" type="application/rss+xml"/><item><title>NHI and Agentic Risk: How Compromise Happens</title><link>https://stackresearch.org/research/nhi-asi-series-01-control-plane/</link><pubDate>Fri, 26 Dec 2025 00:00:00 +0000</pubDate><guid>https://stackresearch.org/research/nhi-asi-series-01-control-plane/</guid><description>&lt;p&gt;An agent incident does not have to begin with a strange model behavior. It can begin with an ordinary credential that no one removed.&lt;/p&gt;
&lt;p&gt;A service account once belonged to a connector. The connector was replaced. The product surface changed. The owner moved teams. The documentation stopped mentioning it. But the account still authenticates, still reaches an API, and still carries the permission it had when the integration was alive. Then an agent arrives. It is given tools, context, and a task. Somewhere underneath that arrangement is the old identity, still able to answer.&lt;/p&gt;</description></item></channel></rss>