Never assume
- A Lyra actor can read every organization.
- A scope can bypass organization policy.
- An authorization evaluation performed an external action.
- Prompt text is a substitute for explicit resource and scope authorization.
AI & DELEGATION
Lyra security
Keep delegated AI access least-privilege, auditable, and bounded by independent controls.