https://e343c64b.dataagentx.pages.dev/en/tags/owasp/Recent content in OWASP on DataAgentXHugoen-USSat, 12 Sep 2026 00:00:00 +0000https://e343c64b.dataagentx.pages.dev/en/tech/20260912-governance-and-security/Sat, 12 Sep 2026 00:00:00 +0000https://e343c64b.dataagentx.pages.dev/en/tech/20260912-governance-and-security/<p>A regional manager and a corporate analyst can ask the same question—“How is channel conversion performing?”—and be entitled to different answers. Row-level filtering in the database is not enough if a cache, export, or shared report can later deliver the corporate result to the regional user.</p> <p>Governance cannot be a system prompt that says “do not reveal sensitive information.” It must cover discovery, model context, tool invocation, runtime, delivery, and business actions, enforced by systems the model cannot override.</p>