Autonomous Agents Need Mandatory Access Control

Legiscope proposes Agent Mandatory Access Control (AMAC), a draft profile in which an API accepts a deny-by-default policy with each agent task, returns the effective restrictions before execution, and refuses the run if any required enforcement point is missing. It draws on FreeBSD's MAC, Capsicum and jails, and on OWASP's Agent Control Standard. The author says OpenAI and Claude documentation already covers hosted network limits and permission policies, but application-executed tools remain the developer's job. AMAC is not an adopted standard, and Claude Managed Agents is documented as beta.