AI Agent Authorization: Approval Is Not a Blank Check

TL;DR AI agent authorization must connect permission to the exact action, executing identity, target, current policy, and validity window. A verified proposal is not permission to deploy, and a human approval should not survive material changes to the plan without reassessment. This article develops an action-bound approval contract for the two-cluster workflow introduced in Part 1. It separates p