CAGE tests authorization under combined binding and numeric errors
CAGE checks whether an agent action stays authorized when a typed tool result contains one plausible provenance or entity-binding error plus bounded numeric drift, showing that separately safe categorical and numerical checks can combine unsafely.
Why it matters: A correct policy can still permit the wrong payment, approval, or access change when the right number is attached to the wrong account, user, or source.