AI-to-third-party-app connections grew 9×+ across Obsidian customers in 90 days. This field journal shows you how to trace one of those paths, find where it can be cut, and write a policy around what it must never do.
Work lives in third-party apps, and so does the data. Integrations, OAuth grants, service accounts, and AI agents connect those apps into a living system that keeps changing after approval: scopes widen, owners leave, agents gain tools, and attackers reuse the trust already built in.
This field journal consists of observations from our security experts gleaned from our customer data packed into insights you can finish in one sitting. It gives you the five questions to ask of any agent or integration, an anatomy of post-approval drift, and expert reads from Carl Shimel, Scott Young, Viet Tran, and Chris Fuller.