Test the Control Plane With Hostile Agents, Not Polite Ones

Well-behaved test agents validate the happy path, but the control plane earns trust by holding its rules against agents that push, retry, and probe.

Polite test agents ask permission and accept refusal. Real workloads include agents that retry aggressively, hold locks too long, and write where they should read.

Hostile behaviors worth simulating

• Retry storms against a denied action to confirm denials hold.
• Writes attempted just outside granted scope boundaries.
• Lock acquisition that never releases, to verify eviction works.

Use the threat model, security docs, and examples to prove the rules hold against deliberately misbehaving agents.