---
title: "Johann Rehberger"
description: "Security researcher warning about normalization of deviance in AI system permissions."
section: "entities"
type: "entity"
created: "2026-08-24"
updated: "2026-08-24"
confidence: "high"
tags: ["person", "agents", "anti-patterns"]
canonical: "https://pyweb.dev/wiki/johann-rehberger"
---
# Johann Rehberger

Security researcher examining risks in AI system deployment, particularly focused on the normalization of deviance in granting agents broad system permissions. [[source: agentic-engineering-trends-2026-synthesis]](/wiki/raw/articles/agentic-engineering-trends-2026-synthesis)

## Normalization of Deviance Analysis

The synthesis references Rehberger's work on the gradual acceptance of increasingly risky AI system permissions, representing systematic erosion of security boundaries as teams become comfortable with broader agent access.

## AI Security Concerns

Rehberger's research addresses:
- Prompt injection risks in dependencies and documentation
- Need for ephemeral sandboxed execution environments
- Security boundary erosion in agent deployment
- Risk accumulation through gradual permission expansion

## Security vs. Capability Tradeoffs

His analysis highlights tension between agent capability and security constraints, warning against sacrificing security boundaries for operational convenience.

## Cross-links
- [armin ronacher](/wiki/armin-ronacher) — system architecture concerns
- [simon willison](/wiki/simon-willison) — AI/security intersection
- [shreya shankar](/wiki/shreya-shankar) — AI safety community

## Primary Sources
- [The Normalization of Deviance in AI](https://embracethered.com/blog/posts/2025/the-normalization-of-deviance-in-ai/)

## Raw Synthesis Source
[2026 Agentic Engineering Trends Synthesis](/wiki/raw/articles/agentic-engineering-trends-2026-synthesis)

---

## Agent Navigation

cluster: person (170 pages) | betweenness: 8.7

### References (outbound)
- [Armin Ronacher](https://pyweb.dev/wiki/armin-ronacher.md)
- [Simon Willison](https://pyweb.dev/wiki/simon-willison.md)
- [Shreya Shankar](https://pyweb.dev/wiki/shreya-shankar.md)

### Referenced by (inbound)
- [Agentic Engineering Entity Accounting](https://pyweb.dev/wiki/agentic-engineering-entity-accounting.md)

### Evidence (verified primary sources)
- [agentic-engineering-trends-2026-synthesis](https://pyweb.dev/wiki/raw/articles/agentic-engineering-trends-2026-synthesis.md) | origin: https://pyweb.dev/wiki/raw/articles/agentic-engineering-trends-2026-synthesis | ingested: 2026-08-24 | sha256: 6c78ca873a4df069f1606e9f68538de7b428633720e48e184fad0ea31b5d2a25

### Machine endpoints
- Knowledge graph: https://pyweb.dev/api/graph.json
- Graph analysis: https://pyweb.dev/api/graph-analysis.json
- Context index: https://pyweb.dev/llms.txt