Conceptper-call authorization
Per-call Authorization
A fine-grained agent permission governance model that re-evaluates authorization on every tool call based on caller identity, tool scope, and task context, discarding the decision afterward. Compared with session-level permissions, per-call authorization enables decisions when the agent has full context, effectively defending against indirect prompt injection.
Timeline (last 90 days)
Oct 15
Authorization should be granted per single call and discarded after use, with the next call re-evaluated from scratch, rather than evaluated once at the start of a session.
Unverified50%