{
  "schema_version": "1.1",
  "id": "s8:https://www.youtube.com/watch?v=vGn6N4-bxBY",
  "slug": "your-agent-just-authorized-what-jay-mok-ben-coumes-paypal-024znqi",
  "url": "https://feed7.dev/p/your-agent-just-authorized-what-jay-mok-ben-coumes-paypal-024znqi",
  "title": "Your Agent Just Authorized What?! — Jay Mok & Ben Coumes, Paypal",
  "why_included": "Agent authorization should scale with stakes and reversibility: logs may cover coding changes, while open-ended payments need scoped, time-bound, independently verifiable mandates.",
  "summary": "PayPal frames authorization around **three questions**: did the human approve, is the action currently within scope, and can that approval be proven later. Its approval token can be issued before product selection and carries constraints including **amount, expiry, and merchant**.",
  "practical_implication": "Match controls to consequences. Reversible coding work may rely on permissions and logs; payments inside a vetted network can use scoped credentials; irreversible actions across unknown parties need signed intent that merchants and processors can verify independently.",
  "agent_context": "PayPal frames authorization around **three questions**: did the human approve, is the action currently within scope, and can that approval be proven later. Its approval token can be issued before product selection and carries constraints including **amount, expiry, and merchant**.\n\nMatch controls to consequences. Reversible coding work may rely on permissions and logs; payments inside a vetted network can use scoped credentials; irreversible actions across unknown parties need signed intent that merchants and processors can verify independently.\n\nThe highest-stakes open-ecosystem model was **not yet observed in production**. PayPal's near-term token is an opaque value only PayPal can validate, while interoperable FIDO verifiable intents and AP2 mandates remain the proposed direction.",
  "source": {
    "name": "AI Engineer",
    "url": "https://www.youtube.com/watch?v=vGn6N4-bxBY",
    "published_at": "2026-09-01T18:30:06.000Z"
  },
  "source_class": "video",
  "content_type": "Video",
  "layer": "agent",
  "domains": [
    "coding",
    "security"
  ],
  "topics": [
    "tool-use",
    "harness-engineering",
    "agent-reliability"
  ],
  "verification": {
    "status": "source_linked",
    "label": "Source Linked",
    "method": "source_feed",
    "verified_at": null
  },
  "uncertainty": [
    "The highest-stakes open-ecosystem model was **not yet observed in production**. PayPal's near-term token is an opaque value only PayPal can validate, while interoperable FIDO verifiable intents and AP2 mandates remain the proposed direction."
  ],
  "connected_context": {
    "meaning": "This refines least privilege into an evidence-bearing authorization contract: approval must come from a human, remain within current amount, merchant, and time constraints, and be provable after execution. It makes control strength depend on consequence and reversibility, while narrowing the strongest open-ecosystem design to a proposal rather than demonstrated production practice.",
    "corpus_size": 669,
    "generated_at": "2026-09-03T10:00:49.628Z",
    "connections": [
      {
        "title": "Teaching agents to pay — Anna Spysz, Stripe",
        "source_name": "AI Engineer",
        "source_url": "https://www.youtube.com/watch?v=A-zeQiYkmXk",
        "feed7_url": "https://feed7.dev/p/teaching-agents-to-pay-anna-spysz-stripe-04jxy0s",
        "reason": "Stripe’s external limits, cancellation, disclosure, and logs complement PayPal’s approval token by covering execution and recovery around the scoped authorization."
      },
      {
        "title": "AI Agents Are Just Distributed Systems Now — Salman Munaf, TikTok",
        "source_name": "AI Engineer",
        "source_url": "https://www.youtube.com/watch?v=hD9-V56FNRI",
        "feed7_url": "https://feed7.dev/p/ai-agents-are-just-distributed-systems-now-salman-munaf-tiktok-1v4yc47",
        "reason": "Signed intent answers who authorized what, while idempotency, reconciliation, and compensation address the separate unknown-outcome problem after a payment tool call begins."
      },
      {
        "title": "In Code They Act, In Proof We Trust — Erik Meijer, Leibniz Labs",
        "source_name": "YouTube",
        "source_url": "https://www.youtube.com/watch?v=-CnA2lGfymY",
        "feed7_url": "https://feed7.dev/p/in-code-they-act-in-proof-we-trust-erik-meijer-leibniz-labs-1lyno2y",
        "reason": "The proof-gated harness applies the same pre-side-effect principle more generally, but PayPal grounds it in human attribution and constraints that merchants and processors can verify."
      },
      {
        "title": "Tribal Dungeons of Global Shipping: AI Agents at Global Scale — Dmitry Buykin, Maersk",
        "source_name": "AI Engineer",
        "source_url": "https://www.youtube.com/watch?v=dQ-_i1tZiws",
        "feed7_url": "https://feed7.dev/p/tribal-dungeons-of-global-shipping-ai-agents-at-global-scale-dmitry-buyk-0kcigeh",
        "reason": "Maersk’s bounded tools and replayable traces reinforce that scoped authority and provable history must be maintained as operational infrastructure, not treated as a one-time approval prompt."
      }
    ]
  },
  "lifecycle": "Current",
  "published_at": "2026-09-01T18:30:06.000Z",
  "modified_at": "2026-09-01T18:30:06.000Z",
  "supersedes": [],
  "expires_at": null,
  "formats": {
    "html": "https://feed7.dev/p/your-agent-just-authorized-what-jay-mok-ben-coumes-paypal-024znqi",
    "json": "https://feed7.dev/p/your-agent-just-authorized-what-jay-mok-ben-coumes-paypal-024znqi.json",
    "markdown": "https://feed7.dev/p/your-agent-just-authorized-what-jay-mok-ben-coumes-paypal-024znqi.md"
  }
}