We explored a closely related architecture at LinkedIn around centralized identity and policy enforcement at the action/resource boundary, which we presented at RSA Conference earlier this year. The extension to AI agents and machine-speed authorization is particularly interesting.