When should an AI agent have to revalidate its authority?
A thread asks whether agents should re-check authorization before every consequential tool call, since tasks drift and data grows more sensitive mid-execution. The strongest position is to revalidate at the tool-call layer, not in the prompt: a cheap policy gate that re-evaluates scope, sensitivity, and side effects right before execution cannot be talked out of its job the way a prompt can.