Upload a permission policy to visualize agent access, detect privilege escalation paths, and assess breach risk. Runs locally in your browser.
No policy loaded. Upload a JSON file, paste a policy, or load the sample.
This tool models AI agent permissions as a directed graph. Agents connect to resources through granted actions. The analyzer detects paths where an agent can reach resources above its clearance — privilege escalation paths that represent breach risk.
agents: Array of { id, name, role, clearance? } — clearance is a classification key (default: internal).
resources: Array of { id, name, classification } — classification must match a key in classifications.
permissions: Array of { agent, resource, actions[] } — actions are informational; any permission grants access.
classifications: Object mapping classification name → numeric level (higher = more sensitive).
The analyzer builds a bipartite graph (agents ↔ resources). An escalation path exists when an agent can reach a resource whose classification level exceeds the agent's clearance. Paths are traced through shared resources — if Agent A accesses Resource X, and Agent B also accesses Resource X, Agent A may indirectly inherit Agent B's other permissions.
The sample models a government data portal with three agents (analyst, contractor, admin), five resources at varying classifications, and cross-agent resource sharing that creates escalation paths. Load it to see the analyzer in action.
Risk report: Human-readable text summary with findings, statistics, and recommendations.
Graph JSON: Machine-readable graph with nodes, edges, and computed escalation paths for further tooling.