<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9" xmlns:image="http://www.google.com/schemas/sitemap-image/1.1">
<url>
<loc>https://actionauthorizationreport.com</loc>
<lastmod>2026-09-23T03:40:12.463Z</lastmod>
<changefreq>daily</changefreq>
<priority>1</priority>
</url>
<url>
<loc>https://actionauthorizationreport.com/sections/agentic-authorization</loc>
<lastmod>2026-09-23T03:40:12.463Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.5</priority>
</url>
<url>
<loc>https://actionauthorizationreport.com/sections/authorization</loc>
<lastmod>2026-09-23T03:34:27.478Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.5</priority>
</url>
<url>
<loc>https://actionauthorizationreport.com/sections/authorization-models</loc>
<lastmod>2026-09-23T03:34:27.802Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.5</priority>
</url>
<url>
<loc>https://actionauthorizationreport.com/authors/andre-bennett</loc>
<lastmod>2026-09-23T03:40:12.463Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.4</priority>
</url>
<url>
<loc>https://actionauthorizationreport.com/authors/dmitri-ford</loc>
<lastmod>2026-09-23T03:40:12.463Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.4</priority>
</url>
<url>
<loc>https://actionauthorizationreport.com/authors/selin-nakamura</loc>
<lastmod>2026-09-23T03:40:12.463Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.4</priority>
</url>
<url>
<loc>https://actionauthorizationreport.com/posts/prompt-injection-as-an-authorization-bypass-vector</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/ab1f7d7e-d58e-4aef-ad14-68ba3860c8fe/canvas/f8679a7f-f667-4acd-a83b-de8007abda85/generated/7a1c29b9-bf8b-4a39-9181-cfd190af9548.jpeg</image:loc>
</image:image>
<lastmod>2026-09-23T03:40:12.463Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://actionauthorizationreport.com/posts/externalized-authorization-vs-inline-permission-checks</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/ab1f7d7e-d58e-4aef-ad14-68ba3860c8fe/canvas/f8679a7f-f667-4acd-a83b-de8007abda85/generated/50f409fc-2875-4ded-9e21-e481ceed1f60.jpeg</image:loc>
</image:image>
<lastmod>2026-09-23T03:34:27.802Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://actionauthorizationreport.com/posts/broken-object-level-authorization-in-rest-apis</loc>
<image:image>
<image:loc>https://mcxtywzsmeezbwapdahq.supabase.co/storage/v1/object/public/canvas-images/ab1f7d7e-d58e-4aef-ad14-68ba3860c8fe/canvas/f8679a7f-f667-4acd-a83b-de8007abda85/generated/3bdc75bb-0548-4515-8682-3329157efdb9.jpeg</image:loc>
</image:image>
<lastmod>2026-09-23T03:34:27.478Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
</urlset>
