Containing the OWASP Agentic Threats
Seventeen Agentic Threats and the LLM Top 10, Each Given a Verdict
Security reviewers do not arrive with your framing. They arrive with OWASP’s: seventeen agentic threats from memory poisoning to supply chain compromise, plus the LLM Top 10. This part crosswalks both onto the handbook and refuses the move that makes crosswalks worthless, claiming everything. Each threat gets one of three verdicts. Contained means the attacker cannot exceed the authority the Mission committed, though it can still act inside it. Bounded means the cause is out of authorization’s reach and the action gate caps what any resulting action can do. Delegated means it is not an authorization problem and a named complement owns it. Four of the seventeen are contained, twelve are bounded, one is delegated, and half the LLM Top 10 is someone else’s layer.