The three-way combination that makes an agent a data-theft risk: access to private data, exposure to untrusted content, and a channel for external communication. Any two can be lived with; all three in one agent means an injected instruction can read the secrets and mail them out. Named in the security literature and adopted by this book as a checklist (Chapter 17).