Policy-Checked, Attributable, Revocable, Provable AI Agent Authorization

LFDT Oregon AI agents are entering production with long-lived API keys in their environment, broader access than any task needs, and no answer to the questions: Which agent performed this action? Under whose authority? A single prompt injection, leaked credential, or runaway agent can quickly become a security incident. Security reviews delay deployments, and auditors are often left without sufficient evidence to understand what happened. Existing security infrastructure was not designed for a