Tag
The author argues that two distinct problems are often conflated under 'authorization for AI agents': actual access control for agents (IAM/RBAC/ABAC) and post-authorization entity-correctness (returning the wrong record despite allowed access), and asks practitioners whether this split is valid and whether existing terminology covers it.