🤝 CIBA + RAR: approve an agent's action
An AI agent asks to do one exact thing. You approve it out-of-band, on a trusted, logged-in device. The agent gets a token scoped to exactly that action — nothing more.
This is a teaching sandbox — you play both roles at once: the agent's developer (pasting its secret to call the bearer-authed protocol) and the human owner (deciding in your own session). In a real deployment those live on different machines, days apart.
1. Agent requests a sensitive action
2. Pending approvals
3. Poll as the agent
Once approved, the agent's next poll gets a token — scoped to exactly the approved action.
Request an action above first.