driftgate.
HumanAgentLet’s talk
INCIDENT ANALYSIS · RESEARCHER REPORT

A public issue is input—not permission.

In a controlled demonstration, Invariant Labs showed an assistant following instructions in a public GitHub issue to retrieve private repository information and disclose it in a public pull request.

Back to resources

What the source establishes

In a controlled demonstration, Invariant Labs showed an assistant following instructions in a public GitHub issue to retrieve private repository information and disclose it in a public pull request.

Research demonstration, not a DriftGate customer incident. The researchers distinguish the system-level data-flow failure from a flaw in the GitHub MCP server code itself.

The control lesson

A trusted tool can still return untrusted content. Task-scoped retrieval and destination-aware publication rules address different parts of the flow; both matter when private information can reach a public output.

Our control-design analysis: bind the task to the intended repositories, evaluate retrieval before content enters the agent context and apply data/destination policy before publication. This is not evidence that DriftGate prevented this historical demonstration.

Explore an original example
IN PRACTICE · EXAMPLE WORKFLOW

Read the document. Don’t obey the document.

A supplier document contains instructions to retrieve confidential internal records and send them to an external destination.

Treat document text as untrusted. Restrict retrieval to assigned sources, refuse model-requested permission expansion and evaluate outbound destinations against data classification and approved purpose.

See the workflow
THE INTENDED RESULT

The assistant can summarize the supplier information while the unrelated private-data read and export are denied on controlled paths.

Knowledge basesContext isolationData-access policiesProvenance and lineage
BUILD WITH INTENTION

Your next agent.
A better starting point.

Talk about your use caseExplore the platform
EXPLORE DRIFTGATE

Find your starting point.

CONTROL DOMAINS
Environment & Tooling Management

Bring tools, skills, instructions and configuration into one approved environment. Keep the right setup with the right project—not scattered across every client and computer.

Identity, Access & Policy

Give agents and workloads the access their tasks need—not unrestricted access to your business. Connect every governed request to an accountable identity, resource scope and current policy.

Runtime Governance & Execution Control

Put authorization, approvals and limits where your agents act. Follow each consequential operation from intent to an attributable outcome—even when the work waits or a response is lost.

Observability, Audit & Assurance

Connect identities, configurations, decisions and outcomes into an investigation path. Know what changed, why an action was allowed and which evidence supports the result.

Lifecycle & Change Management

Give agents, connections, policies and knowledge a deliberate lifecycle. Review changes, release with intent, understand affected consumers and retire access without losing the history.

Data & Context Governance

Give agents the information their tasks need—not every document your organization owns. Keep source ownership, context boundaries and outbound data rules connected to the work.

CompanyServicesExamples & analysisPlatform overviewDriftLearningAll 59 capabilitiesAll use casesPricingHuman / Agent

Search DriftGate

Quick jumps