Stéphane Tailland
2143c5f0bb
A scope authorises a read and says nothing about volume. An agent reads a thousand records in seconds where a person clicks ten, and until now nothing noticed: the token is valid, the tool is permitted, the ACL passes. identifier: credential keys the counter on the sub claim — the end user, whoever is asking on their behalf — so an agent looping under one person's identity spends that person's budget and cannot spend everyone's. Per-route namespace, so a busy catalog cannot exhaust another domain's. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>