---
title: "Breakout controls · Highflame Glossary"
description: "Runtime controls that keep an agent aligned to its mission: containing, redirecting, or stopping it when it veers off course, before the action lands."
doc_version: "0.1.0"
last_updated: "2026-07-27T05:42:48.105Z"
canonical: "https://www.highflame.com/glossary/breakout-controls"
---

[Home](/index.md)·[Glossary](/glossary.md)·Breakout controls

# Breakout controls

Runtime controls that keep an agent aligned to its mission: containing, redirecting, or stopping it when it veers off course, before the action lands.

Learn more: [AI Runtime Security](/blog/ai-runtime-security-how-to-protect-your-genai-stack-from-real-world-threats.md)

Part of [the Agent Control Fabric](/platform.md): Highflame's identity, policy, and enforcement substrate for AI agents.

[Book a demo](/contact.md) [All terms](/glossary.md)

## Keep exploring the glossary.

[

### Cascade revocation

Revoking a parent credential instantly invalidates everything it delegated, collapsing the affected delegation tree rather than waiting for tokens to expire.

Read →](/glossary/cascade-revocation.md)[

### Cedar

An open, formally analyzable policy language. Highflame authors authorization policy in Cedar and enforces the same policy at every boundary an agent crosses.

Read →](/glossary/cedar.md)[

### CIBA

Client-Initiated Backchannel Authentication: an out-of-band flow that pauses a sensitive agent action for explicit, attributable human approval.

Read →](/glossary/ciba.md)[

### Code agent

Autonomous software that reads code, runs commands, calls tools, and changes systems on a developer's behalf. Securing one means controlling what it can access while it runs, and proving afterward what it did.

Read →](/glossary/code-agent.md)[

### Confused deputy

An attack where a low-privilege agent tricks a higher-privilege one into acting on its behalf. Scope attenuation prevents it: a sub-agent provably cannot exceed its parent's authority.

Read →](/glossary/confused-deputy.md)[

### Delegated authority

The model where an agent acts on behalf of a human or another agent, holding strictly less authority than the principal that authorized it, and provably distinct from that principal.

Read →](/glossary/delegated-authority.md)

## Sitemap

Full site map: [/sitemap.md](https://www.highflame.com/sitemap.md). Machine index: [/sitemap-index.xml](https://www.highflame.com/sitemap-index.xml).