Traditional IAM verifies WHO the agent is — but not WHY it is acting. It cannot evaluate the intent of an action or the contextual risk of execution.
Prevents Google Workspace data exfiltration: Hidden prompt injection attempts to pivot from knowledge-base ingestion into unauthorized Drive and Docs access