01
Delegated authority
Derive an agent’s maximum scope from its human principal.
Treat agents as governed actors with explicit delegation rather than invisible extensions of a user or service account.
Derive an agent’s maximum scope from its human principal.
Decide which tools and API actions are available per task.
Apply amount, duration, resource and environment constraints.
Connect every agent action to its request and decision receipt.
Bring one product, one sensitive action and the access context that makes it difficult to govern.