Intent based authorization

An AI Agent Got Its User Banned From Resy — Keycard, JPMorgan Chase & AAuth

An AI Agent Got Its User Banned From Resy — Keycard, JPMorgan Chase & AAuth

A panel of experts discusses the challenges of granting autonomy to AI agents due to coarse-grained authorization systems. They advocate for intent-based runtime authorization, leveraging concepts like "missions" and "budgets" from AOTH, brain-hands architecture, and dynamic policy management. The discussion covers agentic commerce, accountability through tamper-resistant audit logs, and whether P(doom) is a real threat, emphasizing engineering ingenuity and societal learning from failures.