10 papers
A Theory of Least Autonomy in AI
Christophe Parisel
Least privilege, the principle that an identity should hold only the permissions strictly required for its task, has been a foundational primitive of access control for decades. We…
Privilege Risk Evolution for Non-Human Identities: A Temporal Fiber Model for Cloud IAM
Christophe Parisel
Cloud permission governance implicitly treats permission equivalence as a static relation. We show that for non-human identities (NHIs), equivalence has two irreducible components:…
A Quantitative Confirmation of the Currier Language Distinction
Christophe Parisel
We present a unified quantitative analysis of the Currier A/B language distinction in the Voynich Manuscript, proceeding in two stages. First, we confirm that the distinction is ge…
Evidence of Layered Positional and Directional Constraints in the Voynich Manuscript: Implications for Cipher-Like Structure
Christophe Parisel
The Voynich Manuscript (VMS) exhibits a script of uncertain origin whose grapheme sequences have resisted linguistic analysis. We present a systematic analysis of its grapheme sequ…
Out-of-Domain Stress Test for Temporal Braid Group Privilege Escalation Detection
Christophe Parisel
In a companion paper, we prove that the Burau-Lyapunov exponent LE discriminates focused from dispersed privilege escalation ratchets in cloud IAM graphs, and that no abelian stati…
Detecting Privilege Escalation with Temporal Braid Groups
Christophe Parisel
Within the Strongly Connected Components (SCCs) formed during the temporal evolution of a Cloud permission graph, we use the Burau Lyapunov exponent LE as an algebraic probe to loc…
Directionality of the Voynich Script
Christophe Parisel
While the Voynich Manuscript was almost certainly written left-to-right (LTR), the question whether the underlying script or cipher reads LTR or right-to-left (RTL) has received li…
Quantifying Azure RBAC Wildcard Overreach
Christophe Parisel
Azure RBAC leverages wildcard permissions to simplify policy authoring, but this abstraction often obscures the actual set of allowed operations and undermines least-privilege guar…
A Geometry-Grounded Data Perimeter in Azure
Christophe Parisel
While data perimeter is ubiquitous in cybersecurity speak, it rarely defines how boundary points are arranged. In this paper we show how Azure s blast radius ultrametric provides t…
Scoring Azure permissions with metric spaces
Christophe Parisel
In this work, we introduce two complementary metrics for quantifying and scoring privilege risk in Microsoft Azure. In the Control Plane, we define the WAR distance, a superincreas…