The identity industry's answer, GA from April 2026. Agents become first-class identities: launching one mints a delegation token that is scoped, time-boxed and auditable, and the Cross App Access protocol extends OAuth so downstream systems see agent X acting for user Y with these specific permissions. Whatever shape the organisational brain takes, this is the plumbing that makes "the agent knows only what its principal is cleared to know" enforceable rather than aspirational.