Zero Trust rests on a quiet assumption: once you verify who or what is asking, its behavior is predictable.
A laptop runs the same apps. An employee has a role. An agent can decide to try something new on any given run.
Least privilege and continuous verification still apply,
