Read access is not the threat model Everyone is worried about AI reading things it shouldn't. That's the wrong threat model. The problem starts after the agent reads, and forty years of access control has nothing to say about it. February 22, 2026