You Don't Give Agents Credentials. You Grant Them Power of Attorney.
You’ve been giving AI agents credentials. You should have been giving them Power of Attorney. Three posts on the structural gap in enterprise IAM and what it takes to close it.
You’ve been giving AI agents credentials. You should have been giving them Power of Attorney. Three posts on the structural gap in enterprise IAM and what it takes to close it.
Four posts on Mission-Bound OAuth: the core architecture, the Client Context / ID-JAG companion profile, the AAuth mapping, and a final critique of the architecture itself.
Many current agent deployments skip the step that turns approved intent into bounded authority. This two-part series covers the Mission shaping problem and why even a well-shaped Mission is not enough once an agent is running in the world.
OAuth succeeded in closed worlds. Agents are pushing it into open-world authorization, where discovery, resource binding, and first-contact trust have to work before governance can. This series separates the substrate problem from the Mission shaping problem and explains why agent authorization needs both layers to hold.