Security, Auth, and Multi-Tenancy

Agents often handle sensitive data: confidential documents, personal information, business records, for many users at once. They also introduce new attack surfaces that traditional apps don't have, because they execute model-directed actions. This chapter covers the security fundamentals (identity, authorization, isolation) and the agent-specific risks you must design against.