Topic
Everything we've written on this topic, newest first.
12 October 2026 · 5 min read
Giving an agent permission takes one click. Making every office that relies on it stop, the same day you withdraw it, is much harder. Revocation has to reach offices you don't control, survive slow connections, and leave a record of when it took effect. Short lives help. They don't replace it.
12 October 2026 · 5 min read
Agent identity is the set of facts an office can check about an AI agent before acting on its request. Which agent is this, which person or company stands behind it, and what is it allowed to do today. It is a record the office reads, not a claim the agent makes about itself.
11 October 2026 · 5 min read
Meta describes careful controls inside its Muse personal agent, but they sit inside Meta, and nobody outside can verify them. A shop or bank that receives a Muse request sees a session, not an accountable owner or a scope. We think the receiving office should check facts the agent can't write itself.
3 October 2026 · 5 min read
Running an agent on a phone settles where the data is processed. It doesn't settle who the agent is when it calls a bank or a hospital, who handed it authority, or when that authority ends. A general design for the edge gives each agent its own key and a short-lived, user-approved delegation.
29 September 2026 · 5 min read
At Snapdragon Summit, Qualcomm showed a phone chip that runs a 30-billion-parameter model locally, with "secure permissions" on its list of agent needs and no spec after it. Running locally settles where data is read. It doesn't tell a bank which agent is calling, what it was handed, or when that ends.
