Least privilege, checked by a compiler

说明与用途

在 Staal 语言中，所有操作都需要由宿主应用授予的明确、受限的能力，并由编译器和运行时验证，从而防止 AI 代理误用凭证导致数据丢失。

问题

AI coding agents can unintentionally misuse credentials if they are granted excessive or unrestricted capabilities, leading to catastrophic data loss.

结果

By embedding capability checks into the language, Staal eliminates the risk of an AI agent acting with unintended authority, preventing incidents like the nine‑second database deletion.

工作流

• 1. Host app defines capability limits per customer tier. 2. Host app grants a capability to the Staal program via a JSON grant. 3. Staal compiler checks that the program’s signatures and calls do not exceed granted capabilities. 4. Runtime broker validates each action against the capability chain before invoking the underlying service. 5. If a capability is missing or insufficient, the program fails to start or the action is rejected at runtime.

证据

In Staal, code can't send a message, write a file, call an API or move money unless it holds a capability for that action.

来源

The app decides; Staal enforces, and so does the code's own signature.

来源

The compiler proves the program never asks for more than it holds. The runtime makes sure it never uses more either.

来源