Your Next Customer Might Not Be Human: Meet the Personal Agent Protocol
Right now, most AI shopping agents get into a website the same way a person does. They load pages, click through forms, and sign in with the customer’s own password. Businesses can’t tell an agent fro
Responses
Markdown supported · ⌘↵ to post
YouBeyond
Exploring whether people want a digital self. An idea-stage project inviting feedback.
The revocation step raises a useful edge case: what happens to a write that was authorized but is still queued when access is revoked? I would want the worker to recheck authority before committing, and the audit trail to distinguish requested, authorized and completed. Would you put that boundary in each business API, or in the session layer you describe?