BETWEEN SHADOW AI AND BLIND PERMISSIONS: NAVIGATING AGENT ACCOUNTABILITY

Summary from the TLDR Dev newsletter

Ory Agent Security closes the accountability gap [13] with a dual-principal identity model. Every action requires explicit, distinct authentication for both the human (via OAuth 2.0 with PKCE) and the AI process itself (as a registered OAuth client). That way audit trails reflect real-time delegation: agents and users, together.