Skip to main content

Jurisdiction

Global: Agent Authority Ledger

Global carries 23 records on the Agent Authority Ledger as of September 2026: 17 verified at a primary source, 1 reported, 0 announced with no document yet, 1 searched and absent, and 4 open questions. By kind: standard or protocol 13, draft in progress 3, guidance 3, open question 4.

Standard or protocol

13 records

Draft in progress

3 records

Guidance

3 records

  • VerifiedGuidanceAAL-2026-0016

    OWASP Top 10 for Agentic Applications 2026

    Global · verified 15 September 2026

    OWASP describes the list as providing practical, actionable guidance to help organisations secure AI agents that plan, act, and make decisions across complex workflows.

  • VerifiedGuidanceAAL-2026-0015

    OWASP Top 10 for LLM Applications 2025

    Global · verified 15 September 2026

    LLM01:2025 is Prompt Injection, where user prompts alter the behaviour or output of the model in unintended ways.

  • VerifiedGuidanceAAL-2026-0005

    Model Context Protocol security best practices

    Global · verified 15 September 2026

    Token passthrough is an anti pattern where a server accepts a token from a client without validating it was issued to that server, and the document forbids it.

Open question

4 records

Answers

What people ask about Global

What is settled in Global?

No international standard governs revoking an agent's authority (absent); ISO/IEC 42001, AI management system (verified); Mastercard Agent Pay (reported, primary not reached); Visa Trusted Agent Protocol (verified); SPIFFE workload identity (verified); A2A protocol, agent to agent authentication (verified); RFC 7591, OAuth 2.0 dynamic client registration (verified); RFC 8693, OAuth 2.0 token exchange (verified); RFC 9728, OAuth 2.0 protected resource metadata (verified); RFC 8707, resource indicators for OAuth 2.0 (verified); RFC 6749, the OAuth 2.0 authorization framework (verified); MCP 2026-07-28 authorization hardening (verified); Model Context Protocol authorization (verified). Each record page quotes the document and says what it changes for a team deploying an agent.

What is being written in Global?

Web Bot Auth architecture, an IETF Internet-Draft (verified); Agent Passport System, an IETF Internet-Draft (verified); The OAuth 2.1 Internet-Draft (verified). Each record page quotes the document and says what it changes for a team deploying an agent.

What do regulators and security bodies advise in Global?

OWASP Top 10 for Agentic Applications 2026 (verified); OWASP Top 10 for LLM Applications 2025 (verified); Model Context Protocol security best practices (verified). Each record page quotes the document and says what it changes for a team deploying an agent.

What has nobody settled in Global?

Does a spending limit belong to the agent or to the principal (open question); How does a sub agent's authority attenuate (open question); Can an agent hold a credential of its own (open question); Who is liable when a delegated agent exceeds its mandate (open question). Each record page quotes the document and says what it changes for a team deploying an agent.

What has nobody settled in Global?

Does a spending limit belong to the agent or to the principal; How does a sub agent's authority attenuate; Can an agent hold a credential of its own; Who is liable when a delegated agent exceeds its mandate. The ledger poses these and does not answer them.

What does Global not have?

No international standard governs revoking an agent's authority. Each absent record says where the ledger looked and when, so the search can be repeated.

Every surface

Cut the ledger another way

By jurisdiction

By kind

Verdicts

Cite this page

Free to reuse under CC BY 4.0, with attribution.

In a sentence
According to the GAGE Agent Authority Ledger (as of 15 September 2026), global on the agent authority ledger.
APA
GAGE (Global Academy of Generative-AI Education). (2026). Global on the Agent Authority Ledger. Agent Authority Ledger. Retrieved 15 September 2026, from https://www.gage.academy/tools/agent-authority-ledger/jurisdictions/global
MLA
"Global on the Agent Authority Ledger." Agent Authority Ledger, GAGE (Global Academy of Generative-AI Education), 15 September 2026, https://www.gage.academy/tools/agent-authority-ledger/jurisdictions/global.
Chicago
GAGE (Global Academy of Generative-AI Education). "Global on the Agent Authority Ledger." Agent Authority Ledger. Last modified 15 September 2026. https://www.gage.academy/tools/agent-authority-ledger/jurisdictions/global.
Permalink
https://www.gage.academy/tools/agent-authority-ledger/jurisdictions/global

Last updated . Every record re verified . The ledger is checked weekly, every Monday, and the same day for any NIST, IETF or MCP publication.

Back to the full ledger.

GAGE briefings tell you which AI regulation deadlines are coming, what they actually require of you, and when a program opens.

Powered by GAGE, free EU AI Act tools from the Global Academy of Generative-AI Education
CallEmailHelp