Least privilege, checked by a compiler

Описание и применение

В языке Staal все действия требуют явных ограниченных полномочий, которые выдаёт хост‑приложение и проверяются компилятором и рантаймом, тем самым предотвращая случайное удаление данных AI‑агентом.

Задача

AI coding agents can unintentionally misuse credentials if they are granted excessive or unrestricted capabilities, leading to catastrophic data loss.

Результат

By embedding capability checks into the language, Staal eliminates the risk of an AI agent acting with unintended authority, preventing incidents like the nine‑second database deletion.

Рабочий процесс

• 1. Host app defines capability limits per customer tier. 2. Host app grants a capability to the Staal program via a JSON grant. 3. Staal compiler checks that the program’s signatures and calls do not exceed granted capabilities. 4. Runtime broker validates each action against the capability chain before invoking the underlying service. 5. If a capability is missing or insufficient, the program fails to start or the action is rejected at runtime.

Доказательства

In Staal, code can't send a message, write a file, call an API or move money unless it holds a capability for that action.

Источник

The app decides; Staal enforces, and so does the code's own signature.

Источник

The compiler proves the program never asks for more than it holds. The runtime makes sure it never uses more either.

Источник