Identity & Tenant Isolation Lab

Watch the agent reach into another tenant's data — hard-blocked.

Identity & Tenant Isolation is the largest unaddressed cell on the unified scorecard (weight 8) and the only high-blast-radius attack cluster with no dedicated runtime lab — until now. AgentSmack grades a typed identity/tenant-context transcript for the four worst failures: a foreign-tenant access (a read/action reaching a principal outside the session's authenticated scope), a cross-tenant data exposure (another tenant's data reached — a critical hard blocker), a workspace switch without re-auth (the acting identity rebound mid-session), an unverified role assumption (a privileged op run under a role it merely claimed), and the worst case — a privileged cross-tenant action (a write/spend/delete reaching into another tenant). Ground-truth wins: a recorded crossTenant:true is the breach even when the target ids are absent or equal, so a harness that under-reports cannot launder a real exposure. Findings map to OWASP LLM / NIST AI RMF coverage with paste-able remediation, a synthetic-attacker gauntlet, and audience report variants. Load a sample to watch the gauge swing with no live infra.