Delegated Authorization for AI Agents: Do Not Hand User Tokens to the Model
An agent should execute one task with a short-lived, audience- and permission-restricted credential while preserving user and agent identities, execution-time authorization, confirmation, and audit lineage.