{"_canonicalization":{"envelope_id":"axm_ + sha256(envelope minus {signature, axiom_id, anchors})","envelope_signature":"ed25519(envelope minus {signature, axiom_id})","json":"sort_keys=True, separators=(',',':'), ensure_ascii=False, allow_nan=False, utf-8","leaf_hash":"sha256(0x00 || canonical_json(envelope_full))","seal_signature":"ed25519(seal minus {signature, sig_algorithm})"},"axiom_id":"axm_9aada754f0c32daa0258fdcc78e554d0c20fe874c20277a408e0e9d1e9a2b9f7","bitcoin_anchor":{"bitcoin_attestations":[],"calendar_attestations":[],"ots_url":"","stamped_at":"","status":"pending_next_stamp"},"envelope":{"anchors":[{"chain":"crovia.axiom_graph","height":0,"merkle_proof":"spider_vendor_press_v1","root_at_anchor":"spider_vendor_press_v1"}],"axiom_id":"axm_9aada754f0c32daa0258fdcc78e554d0c20fe874c20277a408e0e9d1e9a2b9f7","axiom_type":"AX.OBS","body":{"axiom_subtype":"news.vendor_press.v1","category":"news","fingerprint":"738e0cf8f2651bc346ffd1602320c6d6c9f4fabdade219506818e7fe9c0e7f37","published":"Wed, 08 Jul 2026 00:00:00 -0400","receipt_hash":"738e0cf8f2651bc346ffd1602320c6d6c9f4fabdade219506818e7fe9c0e7f37","schema":"spider.news.vendor_press.v1","spider":"vendor_press","spider_record":{"axiom_subtype":"news.vendor_press.v1","category":"news","decision_hint":"POSITIVE","envelope_target":"AX.OBS","fingerprint":"738e0cf8f2651bc346ffd1602320c6d6c9f4fabdade219506818e7fe9c0e7f37","observed_at":"2026-07-08T04:43:57.834712Z","parent_run_hash":"46ab019f0b0f0bfcde5e14ed7c256069c6fa8c8079b9f87fd3a8a6d9259e3864","published":"Wed, 08 Jul 2026 00:00:00 -0400","runtime_version":"0.1.0","schema":"spider.news.vendor_press.v1","source_status":200,"source_url":"https://export.arxiv.org/rss/cs.AI","spider":"vendor_press","summary_excerpt":"arXiv:2606.20023v2 Announce Type: replace-cross \nAbstract: As LLM agents increasingly select tools autonomously, their choices among tools with different privileges become safety-relevant. However, prior tool-selection studies focus on safety-agnostic metadata preferences, leaving privilege-sensitive choices underexplored. To address this gap, we study over-privileged tool selection, in which an agent selects or escalates to a higher-privilege tool despite a sufficient lower-privilege alternative. We introduce ToolPrivBench to evaluate whether agents choose higher-privilege tools despite sufficient lower-privilege alternatives, measuring both initial selection and escalation after transient tool failures. Across eight domains and five recurring risk patterns, we find that over-privileged tool selection is common among mainstream LLM agents and is further amplified by transient failures. We further find that general safety alignment does not reliably transfer to least-privilege tool cho","title":"When Lower Privileges Suffice: Investigating Over-Privileged Tool Selection in LLM Agents","url":"https://arxiv.org/abs/2606.20023","vendor":"arxiv_cs_ai"},"summary":"arXiv:2606.20023v2 Announce Type: replace-cross \nAbstract: As LLM agents increasingly select tools autonomously, their choices among tools with different privileges become safety-relevant. However, prior tool-selection studies focus on safety-agnostic metadata preferences, leaving privilege-sensitive choices underexplored. To address this gap, we study over-privileged tool selection, in which an agent selects or escalates to a higher-privilege tool despite a sufficient lower-privilege alternative. We introduce ToolPrivBench to evaluate whether agents choose higher-privilege tools despite sufficient lower-privilege alternatives, measuring both initial selection and escalation after transient tool failures. Across eight domains and five recurring risk patterns, we find that over-privileged tool selection is common among mainstream LLM agents and is further amplified by transient failures. We further find that general safety alignment does not reliably transfer to least-privilege tool cho","title":"When Lower Privileges Suffice: Investigating Over-Privileged Tool Selection in LLM Agents","vendor":"arxiv_cs_ai"},"confidence":{"method":"deterministic"},"decision":"POSITIVE","issued_at":"2026-07-08T04:43:57Z","notes":"Spider vendor_press (news) news.vendor_press.v1","object":{"captured_by":"crovia.spider.vendor_press","primary_source_url":"https://arxiv.org/abs/2606.20023"},"predecessors":[],"schema":"crovia.axiom.v1","signature":"ed25519:6d9c0eed63822aac7c7fa1a33c638d2290ed4ddaf3185f8e79b62267e3570c078ddd916e4c2fca8c151d7fb590954aad9016768961b1d73e4cadca5efb51fc0e","signer":"crovia.substrate","subject":{"observed_at":"2026-07-08T04:43:57Z","source_collector":"spider:vendor_press","target_id":"https://arxiv.org/abs/2606.20023"},"tsa":{"authority":"crovia.substrate.bootstrap","rfc3161_token":"{\"kind\":\"crovia.bootstrap.tsa\",\"source_jsonl\":\"/opt/crovia/spider/data/news/vendor_press_v1.jsonl\",\"source_seal_merkle_root\":\"spider_vendor_press_v1\",\"upgrade_path\":\"Sessione H \\u2014 OpenTimestamps weekly anchor\"}"},"zk_mode":"clear","zk_proof":null},"ledger":{"leaf_hash":"f65f6e475c94265d831547b9cd12ca654b8b07f4b93c8bf39aeb79e496d4c184","leaf_index":292865,"ledger_path":"/opt/crovia/substrate/axiom_ledger.jsonl"},"merkle_proof":{"hash_alg":"sha256","leaf_prefix":"0x00","node_prefix":"0x01","odd_leaf_rule":"duplicate_last","path":[{"sibling":"5fa8aea56c63fe9aad6360779af004148c40d3231cd8ea2bd6da7ac824f873bd","side":"left"},{"sibling":"36196a97a11f0996042bfdf3f12eff805d86d26d5e3b5beee38793fe6fa43969","side":"right"},{"sibling":"9f9db90d9f17e34e76288f991feb67373f542bdf8e6b896dcda968d9aff7f250","side":"right"},{"sibling":"6e22da9d2b3ed4c118dc957d6ba6c87baff0060e684cc4e2a8e4fb5d913a9e29","side":"right"},{"sibling":"fd11fef6169f56ee2d6436f0bc84b7687a3ca1d6aaf8e58ed64ef59b146eee2d","side":"right"},{"sibling":"9ad64c6e4e0b96e008a7023c5b53a49734815b1b1a1b16378dcf9d804f9c413c","side":"right"},{"sibling":"617e77750d7be8d258b9672f3c2eda5e4b605f07228adb8c241e1d828792a13e","side":"right"},{"sibling":"a1c7308f551daa63b64ec77cc13d449bf33e99901d0dda2db2f31bbffc489f6c","side":"right"},{"sibling":"db7425c634a173a48b66583ee32c1bbc8bd9d8222fc9a058769c375b58d4e350","side":"right"},{"sibling":"734e0b99d24020d46ff89b3a21d7fd47637f7587e4afe586fb6fe1f49fb14951","side":"right"},{"sibling":"1174a91ffd715fef4004c103054ba3979b0df671a97b9986f26c644b22f7b68e","side":"right"},{"sibling":"03a737b0f0acc6f32fb2a629212bfae02d124a0d6546cc82e3c7ae458b43fda6","side":"left"},{"sibling":"76855b4804c75c52bf97aa34358950d42d6103cdc1a86be5f0a2c8de4d65c106","side":"left"},{"sibling":"a75ab4319e241beeddb1b3f5705febe0422937926c3479923ccfb0b0082fa4e3","side":"left"},{"sibling":"bd04fa605f883bfb2b81510d045b1e85e555a03da3be083619f61384dfe40ff8","side":"left"},{"sibling":"9e75f2ab0ddf2dc9e92af7049244c21b909734ab57906a35dfad2853ca9966e2","side":"right"},{"sibling":"e6cd4cad39a4b6ca6647d1b0ad2db86e57e5fa6240f65966c10093e91140769b","side":"right"},{"sibling":"90a7efc6b94ec8913fbdf03f4927a821b9fb89921d526716f5ee28f015303779","side":"right"},{"sibling":"1cecb7f447febd025aac272837c80de218aecc6485d2395a509b2a1f1b9c746e","side":"left"}]},"schema":"crovia.axiom_proof.v1","seal":{"first_collector_run_id":"","first_receipt_hash":"","jsonl_path":"/opt/crovia/substrate/axiom_ledger.jsonl","key_id":"430895f101d38164","last_collector_run_id":"","last_receipt_hash":"","leaf_count":292998,"merkle_root":"f533b7efebdfd8fb6ba3e7cc158ee55261fd53a7985f234cfea359170dad4d5a","public_key_hex":"cf742e26f75669dc673cb5c0786a1ae23ae8ca19c347317192ce40c28a7ff25c","run_id":"hourly_json_retrofit_20260708T053701Z","schema":"crovia.seal.v1","seal_family_version":"crovia-seal-family/1","seal_kind":"substrate_batch","sealed_at":"2026-07-08T05:38:17Z","sig_algorithm":"ed25519","signature":"07ebb10c732bbffb28b55a5db01d5525f6b8ab7ef36e1e0a68c35c96ded99f7040c277edba75eb6b15c77feda30bd5321e31ada6f572b674d06f4f8e24bd2f07","signer_version":"1.1.0"},"trust_root":{"key_id":"430895f101d38164","public_key_hex":"cf742e26f75669dc673cb5c0786a1ae23ae8ca19c347317192ce40c28a7ff25c","signature_algorithm":"ed25519","url":"/registry/canon/TRUST_ROOT.md"},"verifier":{"spec":"/registry/canon/AXIOM_RECEIPT_v1.md","url":"/v/axm_9aada754f0c32daa0258fdcc78e554d0c20fe874c20277a408e0e9d1e9a2b9f7"}}