@misc{indiciae1951fa5123ef,
  title = {Local Allow, Global Deny: Why Per-Action Authorization Does Not Compose in LLM Agents},
  author = {Anmol Pandey and Aditya Jain and Liang Chen and Carsten Maple},
  year = {2026},
  url = {https://arxiv.org/abs/2610.27620},
  note = {Source identifier: 2610.27620}
}