TY - RPRT TI - Local Allow, Global Deny: Why Per-Action Authorization Does Not Compose in LLM Agents AU - Anmol Pandey AU - Aditya Jain AU - Liang Chen AU - Carsten Maple PY - 2026 UR - https://arxiv.org/abs/2610.27620 ID - 2610.27620 ER -