trust delegation
16 posts
The padlock only proves someone holds the key
X.509 certificates authenticate a source, not the truth of its content, and trust resolved once at issuance is inherited unchanged until it expires.
The browser runs whatever the host returns
A browser tab holding 2 GB is not a malfunction; it is a trust model that resolves references and never revalidates the referent behind the name.
The rubric graded an empty chair
Brown's AI cheating scandal is not a student failure. It is an assessment system that resolves trust by reference and never revalidates the reality behind it.
You are already in the murder investigation
Flock license plate readers answer queries by reference, never by purpose; the promise that footage serves only serious crime lives in policy, not the system.
Palantir was blacklisted for working exactly as designed
Spain's Palantir blacklist is not about capability. It is what happens when a system executes trust granted once and never revalidates its lawful basis.
PAN-OS remembers the verdict, forgets the reasoning
Firewall rules, AD groups, and JWTs keep executing stored references long after the reality they described has drifted. The system revalidates nothing.
Age verification is identity verification
Age verification resolves identity once and answers every access by reference, relocating control over disclosure from the user to an attestation layer.
The role tag is a label, not a lock
Prompt injection is not a bypass. It is the transformer resolving the whole context window as one sequence, trusting a role label it never enforces.
Sandi Metz named the wrong abstraction
The wrong abstraction fails because systems resolve trust once by reference and never revalidate whether that reference still means what it did.
The log that killed your SSD was working perfectly
A Codex logging bug can write terabytes to a local SSD because the system resolves a configured reference repeatedly and never revalidates the trust behind it.
In January 2025, a hash passed for proof
The open reproduction of DeepSeek-R1 shows verification has no place inside the systems that consume model artifacts. Adoption ran on reference alone.
Your supply chain isn't compromised. It's working.
Microsoft's open-source developer tools executed credential-stealing code through normal package resolution. The control plane never inspected what was returned.