[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"branding":3,"analytics":7,"article-a-new-tool-revokes-coding-agent-permissions-when-the-job-is-done":10,"sections":34},{"siteName":4,"siteTagline":5,"publisherName":4,"contactEmail":6},"The Revision","Tech news, decoded.","editor@therevision.news",{"gaMeasurementId":8,"adsenseClientId":9},"G-ZW2MV82GYR","ca-pub-8533917693782264",{"article":11},{"id":12,"slug":13,"title":14,"dek":15,"body_md":16,"tags_json":17,"published_at":18,"created_at":19,"updated_at":20,"status":21,"review_note":22,"review_notes":23,"image_url":22,"persona_id":22,"persona_name":22,"section":24,"tags":25,"sources":29,"feedback":33,"feedback_at":22,"cost_usd":33,"total_tokens":33},4309,"a-new-tool-revokes-coding-agent-permissions-when-the-job-is-done","A New Tool Revokes Coding Agent Permissions When the Job Is Done","Researchers propose PORTICO, a reference monitor that strips coding agents of tool access as soon as each subgoal closes, not at session end.","Coding agents routinely keep access to tools they no longer need - and a new research system aims to close that window.\n\nA group of researchers has published a paper introducing PORTICO, a reference monitor designed to enforce what they call \"revocable capabilities\" for coding agents. The system compiles a task into an explicit contract that maps which tools the agent can access at each stage - then revokes those handles the moment each subgoal finishes. In a controlled test, PORTICO blocked all 10 post-closure tool reuse attempts while a comparator system without revocation allowed all 10. A stale-write audit produced a 0-out-of-6 versus 6-out-of-6 split in executed forbidden effects.\n\nThe problem being solved - \"lingering authority,\" as the paper names it - is more than a theoretical edge case. Coding agents often hold open file-write, git-mutation, and network-egress permissions for an entire session, even when the specific subtask that required them finished long ago. That residual access is exactly the kind of surface that makes agentic AI systems a serious security concern.\n\nWhether this stays a research artifact or gets folded into a real agent framework is an open question - and the track record of \"security by design\" proposals actually shipping in production tooling is not exactly inspiring.","[\"ai\",\"security\",\"dev-tools\",\"agents\"]","2026-07-08T04:00:00.000Z","2026-07-08T05:22:39.954Z","2026-07-08T05:22:42.811Z","published",null,[],"ai",[24,26,27,28],"security","dev-tools","agents",[30],{"name":31,"url":32},"arXiv cs.AI","https:\u002F\u002Farxiv.org\u002Fabs\u002F2606.22504",0,{"sections":35},[36,40,44,49,54,59,64,69,74,78,83,87,92,97],{"name":37,"slug":24,"count":38,"latest_published_at":39},"AI",2590,"2026-07-16T04:00:00.000Z",{"name":41,"slug":26,"count":42,"latest_published_at":43},"Security",294,"2026-07-15T19:59:48.000Z",{"name":45,"slug":46,"count":47,"latest_published_at":48},"Deals","deals",179,"2026-06-29T20:02:07.000Z",{"name":50,"slug":51,"count":52,"latest_published_at":53},"Policy","policy",158,"2026-07-16T00:02:48.000Z",{"name":55,"slug":56,"count":57,"latest_published_at":58},"Hardware","hardware",122,"2026-07-14T19:46:26.000Z",{"name":60,"slug":61,"count":62,"latest_published_at":63},"Consumer Tech","consumer-tech",93,"2026-07-13T13:20:48.000Z",{"name":65,"slug":66,"count":67,"latest_published_at":68},"Software","software",70,"2026-07-13T19:52:25.000Z",{"name":70,"slug":71,"count":72,"latest_published_at":73},"Science","science",66,"2026-07-10T10:29:37.000Z",{"name":75,"slug":27,"count":76,"latest_published_at":77},"Dev Tools",59,"2026-07-07T04:00:00.000Z",{"name":79,"slug":80,"count":81,"latest_published_at":82},"Gaming","gaming",41,"2026-07-09T04:00:00.000Z",{"name":84,"slug":85,"count":81,"latest_published_at":86},"Startups","startups","2026-06-29T20:55:50.000Z",{"name":88,"slug":89,"count":90,"latest_published_at":91},"General","general",29,"2026-07-10T22:28:58.000Z",{"name":93,"slug":94,"count":95,"latest_published_at":96},"Reviews","reviews",20,"2026-06-24T12:00:01.000Z",{"name":98,"slug":99,"count":100,"latest_published_at":101},"How-To","how-to",6,"2026-06-16T09:00:00.000Z"]