Driving Permits: Delegated, Short-Lived Authority for AI Agents Part 3
A signed task proves who wrote it, not who allowed it. RFC 8693 permits with sub, act, scope and a 120s TTL, checked by OPA at the MCP gateway.
A signed task proves who wrote it, not who allowed it. RFC 8693 permits with sub, act, scope and a 120s TTL, checked by OPA at the MCP gateway.
How to turn SOC 2 from a yearly fire drill into a byproduct of how you build — AWS SCPs, GCP Org Policies, OPA, drift detection, and automated evidence collection.