driftgate.
HumanAgentLet’s talk
INCIDENT ANALYSIS · RESEARCHER REPORT

When a shopping assistant leaves its job description.

Lasso Security reported testing Amazon’s product-question assistant and eliciting responses outside its intended shopping purpose. The article describes the team’s tests, not a quantified loss or arbitrary code-execution finding.

Back to resources

What the source establishes

Lasso Security reported testing Amazon’s product-question assistant and eliciting responses outside its intended shopping purpose. The article describes the team’s tests, not a quantified loss or arbitrary code-execution finding.

Historical researcher report. This is not a claim about the assistant’s current behavior or a named DriftGate customer.

The control lesson

Tool permissions and customer-facing responses are different boundaries. Keeping an assistant on task requires the conversation delivery path as well as limits on any tools it can invoke.

Our control-design analysis: inspect purpose at the request/response checkpoint, bound request consumption, restrict business tools and keep a useful fallback for legitimate customers. A monitoring-only integration cannot retract content already delivered.

Explore an original example
IN PRACTICE · EXAMPLE WORKFLOW

Keep your support agent focused on support.

A shopping assistant is steered away from product and order questions toward unrelated coding or repeated expensive generation.

Check purpose at the request and response-delivery boundary, restrict available tools and bound session consumption. Redirect unrelated requests while preserving escalation for ambiguous legitimate support needs.

See the workflow
THE INTENDED RESULT

The assistant continues normal customer work. An out-of-policy response can be withheld at the integrated delivery checkpoint, independently of tool permissions.

Policy engineCapability controlsExecution limitsBudgets and quotas
BUILD WITH INTENTION

Your next agent.
A better starting point.

Talk about your use caseExplore the platform
EXPLORE DRIFTGATE

Find your starting point.

CONTROL DOMAINS
Environment & Tooling Management

Bring tools, skills, instructions and configuration into one approved environment. Keep the right setup with the right project—not scattered across every client and computer.

Identity, Access & Policy

Give agents and workloads the access their tasks need—not unrestricted access to your business. Connect every governed request to an accountable identity, resource scope and current policy.

Runtime Governance & Execution Control

Put authorization, approvals and limits where your agents act. Follow each consequential operation from intent to an attributable outcome—even when the work waits or a response is lost.

Observability, Audit & Assurance

Connect identities, configurations, decisions and outcomes into an investigation path. Know what changed, why an action was allowed and which evidence supports the result.

Lifecycle & Change Management

Give agents, connections, policies and knowledge a deliberate lifecycle. Review changes, release with intent, understand affected consumers and retire access without losing the history.

Data & Context Governance

Give agents the information their tasks need—not every document your organization owns. Keep source ownership, context boundaries and outbound data rules connected to the work.

CompanyServicesExamples & analysisPlatform overviewDriftLearningAll 59 capabilitiesAll use casesPricingHuman / Agent

Search DriftGate

Quick jumps