AIKIDO-2026-918539

TL;DR

The identity_filter logic in AshAi.Tool.Execution builds an Ash query filter directly from client-supplied JSON arguments. Because map values are interpreted as predicate expressions rather than literal values, a nested operator map such as one using not_eq turns an equality lookup into an arbitrary comparison. Combined with a limit and bulk update or destroy actions, this lets a caller retarget writes to records they should not reach and modify or delete arbitrary rows. The fix pins argument values as literals so identity lookups enforce exact equality.