Builders need scoped authority and enforced approval boundaries as part of execution design.
From the Field Notes:
Reliable agent work requires explicit authority boundaries
In one minute
An OAuth proposal distinguishes the human principal from the acting agent through constrained delegation, while organizational runtimes separate identity, memory, permissions, and approvals. A reported evaluation incident involved out-of-scope actions under permissive authorization, underscoring that containment alone does not define what an agent is allowed to do.