Record · corpus.blog/posts/01a087b2-78be-728c-8cf1-6239734e6510

Mission-Bound Authorization: The Complete Edition

notes.karlmcguinness.com · published 22 July 2026

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at notes.karlmcguinness.com Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
External links: 158
Words captured: 100,843

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

https://www.theregister.com/2025/07/21/replit_saastr_vibe_coding_incident/

theregister.com

https://datatracker.ietf.org/doc/draft-klrc-aiagent-auth/

datatracker.ietf.org

https://github.com/mcguinness/mission-bound-authorization

github.com

https://mcguinness.github.io/mission-bound-authorization/

mcguinness.github.io

https://github.com/mcguinness/mission-bound-authorization/issues

github.com

https://developer.visa.com/capabilities/vau

developer.visa.com

https://datatracker.ietf.org/doc/draft-mcguinness-oauth-client-instance-assertion/

datatracker.ietf.org

https://datatracker.ietf.org/doc/draft-mcguinness-oauth-ai-agent-instance/

datatracker.ietf.org

https://datatracker.ietf.org/doc/draft-mcguinness-oauth-actor-profile/

datatracker.ietf.org

https://datatracker.ietf.org/doc/draft-hartman-credential-broker-4-agents/

datatracker.ietf.org

https://openid.net/specs/authorization-api-1_0.html

openid.net

https://openid.github.io/authzen/authzen-access-request-approval-profile-1_0.html

openid.github.io

https://github.com/openid/authzen/pull/531

github.com

https://datatracker.ietf.org/doc/draft-gerber-oauth-deferred-token-response/

datatracker.ietf.org

https://datatracker.ietf.org/doc/draft-ietf-oauth-identity-assertion-authz-grant/

datatracker.ietf.org

https://datatracker.ietf.org/doc/draft-mcguinness-oauth-id-continuation-assertion/

datatracker.ietf.org

https://datatracker.ietf.org/doc/draft-niyikiza-oauth-attenuating-agent-tokens/

datatracker.ietf.org

https://datatracker.ietf.org/doc/html/rfc8785

datatracker.ietf.org

https://openid.net/specs/authorization-api-1_0-final.html

openid.net

https://www.rfc-editor.org/rfc/rfc9943

rfc-editor.org

https://simonwillison.net/2025/Jun/16/the-lethal-trifecta/

simonwillison.net

https://thehackernews.com/2025/06/zero-click-ai-vulnerability-exposes.html

thehackernews.com

https://www.linkedin.com/pulse/laws-aidentity-patrick-parker-zn9pe/

linkedin.com

https://genai.owasp.org/resource/agentic-ai-threats-and-mitigations/

genai.owasp.org

https://genai.owasp.org/resource/owasp-top-10-for-agentic-applications-for-2026/

genai.owasp.org

https://genai.owasp.org/llm-top-10/

genai.owasp.org

https://artificialintelligenceact.eu/article/12/

artificialintelligenceact.eu

https://artificialintelligenceact.eu/article/14/

artificialintelligenceact.eu

https://artificialintelligenceact.eu/article/26/

artificialintelligenceact.eu

https://datatracker.ietf.org/doc/draft-chen-oauth-agent-authz-use-cases/

datatracker.ietf.org

https://github.com/Maisy-ML/Agent-Authorization-Use-Cases

github.com

https://github.com/mcguinness/mission-bound-authorization/issues/344

github.com

https://github.com/mcguinness/mission-bound-authorization/issues/343

github.com

https://mcguinness.github.io/mission-bound-authorization/draft-mcguinness-mission-architecture.html

mcguinness.github.io

https://datatracker.ietf.org/doc/draft-hardt-oauth-aauth-protocol/

datatracker.ietf.org

https://www.nist.gov/publications/role-based-access-control-rbac-features-and-motivations

nist.gov

https://www.rfc-editor.org/rfc/rfc6749.html

rfc-editor.org

https://docs.kantarainitiative.org/uma/wg/rec-oauth-uma-grant-2.0.html

docs.kantarainitiative.org

https://spiffe.io/docs/latest/spiffe-specs/spiffe_workload_api/

spiffe.io

https://datatracker.ietf.org/wg/wimse/about/

datatracker.ietf.org

https://csrc.nist.gov/pubs/sp/800/162/upd2/final

csrc.nist.gov

https://docs.oasis-open.org/xacml/3.0/xacml-3.0-privacy-v1-spec-cd-1-en.html

docs.oasis-open.org

https://www.rfc-editor.org/rfc/rfc9396.html

rfc-editor.org

https://dl.acm.org/doi/10.1145/984334.984339

dl.acm.org

https://www.rfc-editor.org/rfc/rfc8785

rfc-editor.org

https://datatracker.ietf.org/doc/html/rfc2119

datatracker.ietf.org

https://datatracker.ietf.org/doc/html/rfc8174

datatracker.ietf.org

https://docs.kantarainitiative.org/uma/wg/rec-oauth-uma-federated-authz-2.0.html

docs.kantarainitiative.org

https://csrc.nist.gov/pubs/sp/800/207/final

csrc.nist.gov

https://openid.net/specs/openid-sharedsignals-framework-1_0.html

openid.net

https://openid.net/specs/openid-caep-1_0.html

openid.net

https://datatracker.ietf.org/wg/oauth/documents/

datatracker.ietf.org

https://datatracker.ietf.org/wg/wimse/documents/

datatracker.ietf.org

https://www.rfc-editor.org/rfc/rfc6749

rfc-editor.org

https://www.rfc-editor.org/rfc/rfc6750

rfc-editor.org

https://www.rfc-editor.org/rfc/rfc9126

rfc-editor.org

https://www.rfc-editor.org/rfc/rfc9396

rfc-editor.org

https://www.rfc-editor.org/rfc/rfc7519

rfc-editor.org

https://www.rfc-editor.org/rfc/rfc7515

rfc-editor.org

https://www.rfc-editor.org/rfc/rfc9068

rfc-editor.org

https://www.rfc-editor.org/rfc/rfc8693

rfc-editor.org

https://www.rfc-editor.org/rfc/rfc7662

rfc-editor.org

https://www.rfc-editor.org/rfc/rfc9701

rfc-editor.org

https://www.rfc-editor.org/rfc/rfc7009

rfc-editor.org

https://www.rfc-editor.org/rfc/rfc8414

rfc-editor.org

https://www.rfc-editor.org/rfc/rfc9728

rfc-editor.org

https://www.rfc-editor.org/rfc/rfc9449

rfc-editor.org

https://www.rfc-editor.org/rfc/rfc8705

rfc-editor.org

https://www.rfc-editor.org/rfc/rfc7800

rfc-editor.org

https://www.rfc-editor.org/rfc/rfc8707

rfc-editor.org

https://www.rfc-editor.org/rfc/rfc9470

rfc-editor.org

https://www.rfc-editor.org/rfc/rfc7523

rfc-editor.org

https://www.rfc-editor.org/rfc/rfc7591

rfc-editor.org

https://www.rfc-editor.org/rfc/rfc7636

rfc-editor.org

https://www.rfc-editor.org/rfc/rfc9700

rfc-editor.org

https://www.rfc-editor.org/rfc/rfc8417

rfc-editor.org

https://www.rfc-editor.org/rfc/rfc8935

rfc-editor.org

https://www.rfc-editor.org/rfc/rfc8936

rfc-editor.org

https://www.rfc-editor.org/rfc/rfc9493

rfc-editor.org

https://datatracker.ietf.org/doc/draft-ietf-scitt-scrapi/

datatracker.ietf.org

https://www.rfc-editor.org/rfc/rfc9421

rfc-editor.org

https://www.rfc-editor.org/rfc/rfc9635

rfc-editor.org

https://datatracker.ietf.org/doc/draft-ietf-oauth-v2-1/

datatracker.ietf.org

https://datatracker.ietf.org/doc/draft-ietf-oauth-identity-chaining/

datatracker.ietf.org

https://datatracker.ietf.org/doc/draft-ietf-oauth-transaction-tokens/

datatracker.ietf.org

https://datatracker.ietf.org/doc/draft-ietf-oauth-attestation-based-client-auth/

datatracker.ietf.org

https://datatracker.ietf.org/doc/draft-ietf-oauth-status-list/

datatracker.ietf.org

https://www.rfc-editor.org/rfc/rfc9901

rfc-editor.org

https://datatracker.ietf.org/doc/draft-ietf-oauth-sd-jwt-vc/

datatracker.ietf.org

https://datatracker.ietf.org/doc/draft-ietf-oauth-refresh-token-expiration/

datatracker.ietf.org

https://datatracker.ietf.org/doc/draft-ietf-oauth-spiffe-client-auth/

datatracker.ietf.org

https://datatracker.ietf.org/doc/draft-ietf-oauth-client-id-metadata-document/

datatracker.ietf.org

https://datatracker.ietf.org/doc/draft-ietf-oauth-cross-device-security/

datatracker.ietf.org

https://datatracker.ietf.org/doc/draft-ietf-oauth-first-party-apps/

datatracker.ietf.org

https://datatracker.ietf.org/doc/draft-ietf-oauth-browser-based-apps/

datatracker.ietf.org

https://datatracker.ietf.org/doc/draft-ietf-oauth-security-topics-update/

datatracker.ietf.org

https://datatracker.ietf.org/doc/draft-ietf-oauth-rfc8725bis/

datatracker.ietf.org

https://datatracker.ietf.org/doc/draft-ietf-oauth-rfc7523bis/

datatracker.ietf.org

https://dickhardt.github.io/AAuth/draft-hardt-aauth-r3.html

dickhardt.github.io

https://datatracker.ietf.org/doc/draft-zehavi-oauth-rar-metadata/

datatracker.ietf.org

https://datatracker.ietf.org/doc/draft-rosomakho-oauth-txn-challenge/

datatracker.ietf.org

https://datatracker.ietf.org/doc/draft-fletcher-transaction-token-chaining-profile/

datatracker.ietf.org

https://datatracker.ietf.org/doc/draft-cecchetti-oauth-rar-cedar/

datatracker.ietf.org

https://datatracker.ietf.org/doc/draft-mcguinness-oauth-actor-proofs/

datatracker.ietf.org

https://datatracker.ietf.org/doc/draft-mcguinness-oauth-actor-receipts/

datatracker.ietf.org

https://datatracker.ietf.org/doc/draft-mcguinness-oauth-id-assertion-framework/

datatracker.ietf.org

https://datatracker.ietf.org/doc/draft-li-oauth-delegated-authorization/

datatracker.ietf.org

https://datatracker.ietf.org/doc/draft-liu-oauth-chain-delegation/

datatracker.ietf.org

https://datatracker.ietf.org/doc/draft-mw-oauth-actor-chain/

datatracker.ietf.org

https://datatracker.ietf.org/doc/draft-mishra-oauth-agent-grants/

datatracker.ietf.org

https://datatracker.ietf.org/doc/draft-zhu-oauth-async-delegation/

datatracker.ietf.org

https://datatracker.ietf.org/doc/draft-chen-oauth-agent-revocation/

datatracker.ietf.org

https://datatracker.ietf.org/doc/draft-jiang-oauth-intent-admission/

datatracker.ietf.org

https://datatracker.ietf.org/doc/draft-embesozzi-oauth-agent-native-authorization/

datatracker.ietf.org

https://datatracker.ietf.org/doc/draft-valverde-oauth-pact/

datatracker.ietf.org

https://datatracker.ietf.org/doc/draft-emerson-oauth-user-mediated-delivery/

datatracker.ietf.org

https://datatracker.ietf.org/doc/draft-liu-oauth-authorization-evidence/

datatracker.ietf.org

https://datatracker.ietf.org/doc/draft-vicente-oauth-apm/

datatracker.ietf.org

https://datatracker.ietf.org/doc/draft-hemanth-oauth-ai-scopes/

datatracker.ietf.org

https://datatracker.ietf.org/doc/draft-jia-oauth-scope-aggregation/

datatracker.ietf.org

https://datatracker.ietf.org/doc/draft-araut-oauth-transaction-tokens-for-agents/

datatracker.ietf.org

https://datatracker.ietf.org/doc/draft-liu-oauth-cross-domain-txn-token/

datatracker.ietf.org

https://datatracker.ietf.org/doc/draft-song-oauth-ai-agent-collaborate-authz/

datatracker.ietf.org

https://datatracker.ietf.org/doc/draft-yakung-oauth-agent-attestation/

datatracker.ietf.org

https://datatracker.ietf.org/doc/draft-ekahraman-oauth-attestation-authz-native-app/

datatracker.ietf.org

https://datatracker.ietf.org/doc/draft-ietf-wimse-arch/

datatracker.ietf.org

https://datatracker.ietf.org/doc/draft-ietf-wimse-identifier/

datatracker.ietf.org

https://datatracker.ietf.org/doc/draft-ietf-wimse-wpt/

datatracker.ietf.org

https://datatracker.ietf.org/doc/draft-ietf-wimse-workload-creds/

datatracker.ietf.org

https://datatracker.ietf.org/doc/draft-ietf-wimse-http-signature/

datatracker.ietf.org

https://datatracker.ietf.org/doc/draft-ietf-wimse-mutual-tls/

datatracker.ietf.org

https://datatracker.ietf.org/doc/draft-ietf-wimse-workload-identity-practices/

datatracker.ietf.org

https://spiffe.io/

spiffe.io

https://datatracker.ietf.org/doc/draft-ni-wimse-ai-agent-identity/

datatracker.ietf.org

https://datatracker.ietf.org/doc/draft-nennemann-wimse-ect/

datatracker.ietf.org

https://datatracker.ietf.org/doc/draft-munoz-wimse-authorization-evidence/

datatracker.ietf.org

https://datatracker.ietf.org/doc/draft-reece-wimse-cross-org-delegation/

datatracker.ietf.org

https://datatracker.ietf.org/doc/draft-winmagic-wimse-condition-bounded-credentials/

datatracker.ietf.org

https://datatracker.ietf.org/doc/draft-ccc-wimse-twi-extensions/

datatracker.ietf.org

https://datatracker.ietf.org/doc/draft-jiang-wimse-heterogeneous-credential/

datatracker.ietf.org

https://datatracker.ietf.org/doc/draft-liu-wimse-wit-attestation/

datatracker.ietf.org

https://datatracker.ietf.org/doc/draft-mw-wimse-transitive-attestation/

datatracker.ietf.org

https://datatracker.ietf.org/doc/draft-reddy-wimse-workload-attestation/

datatracker.ietf.org

https://datatracker.ietf.org/doc/draft-schwenkschuster-wimse-trust-domain-discovery/

datatracker.ietf.org

https://openid.net/specs/openid-connect-core-1_0.html

openid.net

https://openid.net/specs/openid-connect-discovery-1_0.html

openid.net

https://openid.github.io/authzen/authzen-mcp-profile-1_0.html

openid.github.io

https://openid.net/specs/openid-sharedsignals-framework-1_0-final.html

openid.net

https://openid.net/specs/openid-caep-1_0-final.html

openid.net

https://openid.net/specs/openid-client-initiated-backchannel-authentication-core-1_0.html

openid.net

https://openid.net/specs/fapi-security-profile-2_0-final.html

openid.net

https://openid.net/specs/openid-federation-1_0.html

openid.net

https://openid.net/wg/ipsie/

openid.net

https://openid.net/sg/openid4vc/

openid.net

https://openid.net/specs/openid-connect-session-1_0.html

openid.net

https://openid.net/specs/openid-connect-frontchannel-1_0.html

openid.net

https://openid.net/specs/openid-connect-backchannel-1_0.html

openid.net

https://www.rfc-editor.org/rfc/rfc7522

rfc-editor.org

Elsewhere on notes.karlmcguinness.com (52)

The Question Authorization Never Answered Read at the source ↗

notes.karlmcguinness.com

Designing Mission-Bound Authorization Read at the source ↗

notes.karlmcguinness.com

https://notes.karlmcguinness.com/notes/adopting-mission-bound-authorization/

notes.karlmcguinness.com

https://notes.karlmcguinness.com/notes/mission-based-authorization-field-reference/

notes.karlmcguinness.com

https://notes.karlmcguinness.com/notes/mission-based-authorization-vendor-test/

notes.karlmcguinness.com

https://notes.karlmcguinness.com/notes/the-authority-control-plane/

notes.karlmcguinness.com

What the Corporate Card Already Solved Read at the source ↗

notes.karlmcguinness.com

Building Mission-Bound Authorization Read at the source ↗

notes.karlmcguinness.com

Testing Mission-Bound Authorization Read at the source ↗

notes.karlmcguinness.com

Weighing Mission-Bound Authorization Read at the source ↗

notes.karlmcguinness.com

https://notes.karlmcguinness.com/notes/mission-bound-authorization-on-the-wire/

notes.karlmcguinness.com

https://notes.karlmcguinness.com/notes/common-objections-to-mission-based-authorization/

notes.karlmcguinness.com

https://notes.karlmcguinness.com/notes/mission-bound-authorization-standards-map/

notes.karlmcguinness.com

https://notes.karlmcguinness.com/notes/mission-bound-authorization-glossary/

notes.karlmcguinness.com

Least Exposure Is Broader Than Least Privilege Read at the source ↗

notes.karlmcguinness.com

Least-Privilege MCP Tool Calls Need a Mission Read at the source ↗

notes.karlmcguinness.com

https://notes.karlmcguinness.com/mission-handbook/read.md

notes.karlmcguinness.com

https://notes.karlmcguinness.com/series/you-dont-give-agents-credentials-you-grant-them-power-of-attorney/

notes.karlmcguinness.com

https://notes.karlmcguinness.com/series/mission-shaping/

notes.karlmcguinness.com

Sessions Are Not Missions Read at the source ↗

notes.karlmcguinness.com

https://notes.karlmcguinness.com/notes/you-approve-what-you-were-shown/

notes.karlmcguinness.com

https://notes.karlmcguinness.com/notes/the-contractor-gets-their-own-card/

notes.karlmcguinness.com

https://notes.karlmcguinness.com/notes/the-network-approves-every-transaction/

notes.karlmcguinness.com

https://notes.karlmcguinness.com/notes/canceling-the-card-doesnt-stop-the-charges/

notes.karlmcguinness.com

https://notes.karlmcguinness.com/notes/agents-need-a-corporate-card-not-a-blank-check/

notes.karlmcguinness.com

https://notes.karlmcguinness.com/notes/the-mission-is-the-missing-abstraction/

notes.karlmcguinness.com

https://notes.karlmcguinness.com/notes/from-a-request-to-an-approved-mission/

notes.karlmcguinness.com

https://notes.karlmcguinness.com/notes/mission-bound-authority/

notes.karlmcguinness.com

https://notes.karlmcguinness.com/notes/mission-bound-runtime-enforcement/

notes.karlmcguinness.com

https://notes.karlmcguinness.com/notes/mission-lifecycle-and-change/

notes.karlmcguinness.com

https://notes.karlmcguinness.com/notes/the-agent-runtime-and-audit/

notes.karlmcguinness.com

https://notes.karlmcguinness.com/notes/what-survives-without-oauth/

notes.karlmcguinness.com

https://notes.karlmcguinness.com/series/open-world-oauth/

notes.karlmcguinness.com

Authorization Is the Other Half of Executable Intent Read at the source ↗

notes.karlmcguinness.com

https://notes.karlmcguinness.com/series/mission-bound-oauth/

notes.karlmcguinness.com

https://notes.karlmcguinness.com/notes/the-convergence-and-the-wagers/

notes.karlmcguinness.com

https://notes.karlmcguinness.com/series/least-privilege-mcp/

notes.karlmcguinness.com

AAuth Now Has a Mission Layer Read at the source ↗

notes.karlmcguinness.com

https://notes.karlmcguinness.com/notes/splitting-the-lethal-trifecta/

notes.karlmcguinness.com

https://notes.karlmcguinness.com/notes/making-compliance-a-by-product/

notes.karlmcguinness.com

https://notes.karlmcguinness.com/notes/containing-the-owasp-agentic-threats/

notes.karlmcguinness.com

https://notes.karlmcguinness.com/notes/from-the-card-to-the-architecture/

notes.karlmcguinness.com

Mission Architecture on AAuth Read at the source ↗

notes.karlmcguinness.com

Why Mission-Bound OAuth Might Be the Wrong Answer Read at the source ↗

notes.karlmcguinness.com

https://notes.karlmcguinness.com/mission-handbook/

notes.karlmcguinness.com

Closing the Gaps in Least-Privilege MCP Tool Calls Read at the source ↗

notes.karlmcguinness.com

Two Models for Least-Privilege MCP Tool Calls Read at the source ↗

notes.karlmcguinness.com

A Blocked Agent Is a Captive Client Read at the source ↗

notes.karlmcguinness.com

Open-World OAuth Still Needs Mission Shaping Read at the source ↗

notes.karlmcguinness.com

Mission Shaping Is Not Enough Read at the source ↗

notes.karlmcguinness.com

https://notes.karlmcguinness.com/notes/closing-the-agent-authorization-gaps/

notes.karlmcguinness.com

https://notes.karlmcguinness.com/notes/answering-the-laws-of-aidentity/

notes.karlmcguinness.com