Ambient Authority

Ambient authority is permission available implicitly through the execution environment instead of explicitly passed for a particular task. Examples include a process-wide credential or broad filesystem access that any component can use.

Such authority makes it harder to determine which permissions a function truly needs and increases the impact of a compromised dependency. Explicitly scoped capabilities can reduce that exposure, though the surrounding platform must support meaningful isolation.