JWT
service-to-service と app layer の boundary を明確にします。
Auth model
Control planes
Agent roles
system agent、user agent、external agent を区別します。
Scope control
connector、intent、risk に応じて scope を絞ります。
Auth should express responsibility
In autonomous systems, auth is not only identity. It is also the boundary of delegated action.