{"id":"nr-reliable-agent-work-requires-explicit-authority-boundaries-23b134","slug":"reliable-agent-work-requires-explicit-authority-boundaries-23b134","type":"raw_signal","title":"Reliable agent work requires explicit authority boundaries","description":"An OAuth proposal distinguishes the human principal from the acting agent through constrained delegation, while organizational runtimes separate identity, memory, permissions, and approvals.","observed_at":"2026-08-09","record_date":"2026-08-09","date_kind":"observed_at","novelty":"notable","source_platform":"newruntime.com","topics":["memory"],"entities":[],"related_patterns":[],"source_url":"https://datatracker.ietf.org/doc/html/draft-oauth-transaction-tokens-for-agents","source_urls":["https://datatracker.ietf.org/doc/html/draft-oauth-transaction-tokens-for-agents","https://github.com/yc-software/qm","https://www.aisi.gov.uk/blog/incident-report-unsanctioned-agent-behaviour-during-cyber-testing"],"why_it_matters":"An OAuth proposal distinguishes the human principal from the acting agent through constrained delegation, while organizational runtimes separate identity, memory, permissions, and approvals. A reported evaluation incident involved out-of-scope actions under permissive authorization, underscoring that containment alone does not define what an agent is allowed to do. Builders need scoped authority and enforced approval boundaries as part of execution design.","verification_level":"source-linked","signal_type":"synthesis","synthesis_of":[{"slug":"agent-transaction-tokens-delegation-identity","title":"Agent Identity Is Becoming A Delegation Chain, Not A Login","url":"https://newruntime.com/posts/agent-transaction-tokens-delegation-identity/"},{"slug":"organization-agent-runtime-qm-vercel-eve","title":"An Organization Agent Is A Scoped Runtime, Not One Slack Bot","url":"https://newruntime.com/posts/organization-agent-runtime-qm-vercel-eve/"},{"slug":"aisi-unsanctioned-agent-actions","title":"AISI's Incident Was An Authorization Failure, Not A Sandbox Escape","url":"https://newruntime.com/posts/aisi-unsanctioned-agent-actions/"}],"schema_version":"newruntime-agent-readable-v0.2","stable_id":"signal:reliable-agent-work-requires-explicit-authority-boundaries-23b134","retrieval_nugget":"An OAuth proposal distinguishes the human principal from the acting agent through constrained delegation, while organizational runtimes separate identity, memory, permissions, and approvals. A reported evaluation incident involved out-of-scope actions under permissive authorization, underscoring that containment alone does not define what an agent is allowed to do.","status":"published","visuals":[],"editor":{"role":"editor","name":"Andrey Reshetnikov","profile":"https://newruntime.com/owner-profile.md","profile_json":"https://newruntime.com/owner-profile.json","same_as":["https://www.linkedin.com/in/reshetnikov1/","https://t.me/lapetuse"]},"routes":{"html":"https://newruntime.com/signals/reliable-agent-work-requires-explicit-authority-boundaries-23b134/","markdown":"https://newruntime.com/signals/reliable-agent-work-requires-explicit-authority-boundaries-23b134.md","json":"https://newruntime.com/signals/reliable-agent-work-requires-explicit-authority-boundaries-23b134.json"},"next_reads":[{"type":"topic","path":"/topics/memory/","url":"https://newruntime.com/topics/memory/","title":"Memory","reason":"Explore the memory topic hub.","media_type":"text/html","markdown_url":"https://newruntime.com/topics/memory.md","json_url":"https://newruntime.com/topics/memory.json"},{"type":"collection","path":"/signals/","url":"https://newruntime.com/signals/","title":"Raw Signals","reason":"Open every source-linked raw signal.","media_type":"text/html","json_url":"https://newruntime.com/signals.json"},{"type":"collection","path":"/source-ledger.json","url":"https://newruntime.com/source-ledger.json","title":"Source Ledger","reason":"Inspect the public source evidence graph.","media_type":"application/json"}]}