Evidence limitation
Script choice is not a security boundary
Direct limitation
It does not authenticate the sender, authorize the action, protect confidentiality, prevent replay, or make tool execution safe.
Artifact or claim that may be supported
A constrained script can simplify parser allowlists and visual separation.
What the evidence does not establish
It does not authenticate the sender, authorize the action, protect confidentiality, prevent replay, or make tool execution safe.
Additional evidence required
A trusted parser may execute malicious intent encoded in a valid glyph sequence.
Mitigation
Use signed envelopes, capabilities, schema validation, least authority, freshness, replay protection, and independent policy enforcement.
Supporting sources
- FIPS 204 — Module-Lattice-Based Digital Signature Standard — NIST; FIPS 204; FINAL. Exact claim-support entries: 1. Revalidated 2026-08-15T23:55:00Z.