[theaniketgiri]

Exactly — current platforms authenticate the account, but with agents the account isn’t the decision-maker anymore.

Two identical API calls can come from either intended behavior or a manipulated model, and today they look the same to the system. Permissions tied to a static identity don’t describe the real risk.

So the missing piece is verifying the agent’s declared intent and boundaries before execution, not just who sent the request.

That’s why this starts looking more like protocol infrastructure than a product feature.