[PH0]]: I-Proposed Agent Delegation Model

A proposed standard for AI agent delegation. Scoped permissions, instant revocation, full audit trails.

Status:Isiphakamiso somklamo wePhuc Labs.Asikagunyaziwe yi-IETF, i-W3C, noma yimuphi umphakathi wezindinganiso.Impendulo iyamukelwa.

Funda i-Draft Spec Bheka i-OAuth3 isebenza

Yini i-OAuth3?

OAuth 2.0 was built for delegated authorization between apps. OAuth3 extends this to AI agents.

I-PH0 iyisibonelo esiphakanyisiwe sokuphathiswa kwesikhundla senkathi ye-AI. It addresses four critical problems:

I-OAuth3 isebenza kanjani

UcelaUmmeli ukusiza ngomsebenzi

Ummeli uchazaImaphi imvume edingekayo ngqo

Ubuyekeza futhi uvumenoma ukwenqaba imvume ngayinye

I-Agent isebenzaNgaphakathi komkhawulo ovunyelwe kuphela

Ungakwazi ukuhoxisaUkufinyelela ngokushesha, nganoma yisiphi isikhathi

Izinsika Ezine

Izikrini ze-Izikrini ze-Granular Scopes

Awufinyeleli kuwo wonke ama-imeyili kodwa funda ama-imeyili avela kumphathi, ungalokothi ususe noma yimaphi. Imvume iyingqayizivele.

Imvume ecacile

Uyabona ukuthi yini ngempela efunwa yileso sigqila, uyavuma noma uyaphika, akukho mvume ethule, akukho ukufinyelela okungazelelwe.

Ukuhoxiswa Okusheshayo

Yeka ukuthembela kumuntu osebenza naye? Vimbela ukufinyelela kwakhe ngokushesha. Amathokheni ayafa ngokushesha. Akukho ukulinda izinguquko zamaphasiwedi.

I-I-Full Audit Trail

I-PH0 yakhelwe ukusekela amarekhodi ezinyathelo asayinwe, afakwe isikhathi. Bona zonke izenzo ezenziwe yisithunywa, nini, futhi kungani.

OAuth3 Imingcele Kungani

Izinkinga ezikhona: Today, you either give an agent full access or no access at all.

Isixazululo se-OAuth3: An OAuth3 token contains three things: scope, TTL, and evidence requirements.

I-OAuth3 Token

Notice: the agent can READ inbox but not SEND. It can DRAFT replies but not DELIVER. Every action is logged.

{
  "identity": "agent:gmail-triage:v1",
  "scopes": ["gmail.read.inbox", "gmail.modify.labels"],
  "expires": "2026-03-27T15:00:00Z",
  "revocation_ref": "srv_rev_123",  // server-side only
  "signature": "sha256:8f3c..."
}
    

Notice: the agent can READ inbox but not SEND.

Ukulungele ukuhlelela ngokuphepha?

Ready to delegate safely?

Isifinyezo somphakathi:Iphepha le-OAuth3• Umthombo we-spec:Ukubekwa uphawu lwendawo yendawo

Vula Isiphequluli se-Solace Browser Umthombo Spec →