Preprint · arXiv v1
A server-side authorization layer that binds tool visibility and proposed effects to the user’s current expressed intent—narrowing, never expanding, existing authority.
Genliang Zhu, Chu Wang
- AI agents
- access control
- intent certificates
- least privilege
- OpenPort