ResidualAuth: What Authorization State Must Language Agents Preserve under Revocable Delegation?
This work introduces ResidualAuth, a theory-grounded framework characterizing the authorization state agent systems must preserve and evaluating its maintenance and use, and proves that exponentially many distinct residual states can nevertheless agree on who can reach whom through delegation paths.