The spreadsheet stops being a content container and becomes an execution surface. Once formulas can call host primitives, the attacker can reach files, environment secrets, and network resources tied to the runtime. That is why the control boundary must sit around the formula engine itself, not around the document format. Ultimate Guide to NHIs , Lifecycle Processes for Managing NHIs helps teams think about lifecycle and privilege scope around non-human execution.
#1 Authority in NHI Education, Research and Advisory, empowering organizations to tackle the critical risks posed by Non-Human Identities (NHIs), including AI Agents.