Definitions · Z
Zero Standing Privilege (ZSP) for AI
Zero Standing Privilege for AI means agents receive short-lived, task-scoped credentials rather than persistent broad access. Blekline supports ZSP patterns via Trust Vault tokenization and workload identity binding (roadmap: SPIFFE).
Zero Standing Privilege (ZSP) for AI means agents receive short-lived, task-scoped credentials instead of persistent broad access — similar to ZSP in human PAM, adapted for machine workloads.
Blekline approach
- Trust Vault tokenization — secrets as
BLW_VAULT_*placeholders in LLM context - Hydrate only in-cluster on approved tool paths
- Roadmap: SPIFFE workload identity binding on hydrate