ResidualAuth: What Authorization State Must Language Agents Preserve under Revocable Delegation?

Moonwon Choi, Seokho Jeong, Seunggeun Lee

Tool-using language agents can delegate and revoke permissions while acting through external services. We show that two authorization histories can have identical current permissio…