ResidualAuth: What Authorization State Must Language Agents Preserve under Revocable Delegation?

arXiv:2609.08062v2 Announce Type: replace Abstract: With revocable delegation, two histories can yield identical current permissions yet require opposite decisions for the same query after the same revocation. We introduce ResidualAuth, a theory-grounded frame