Right now most platforms just treat agents as regular user accounts with no verification layer. Having a standardized protocol for agent capabilities and permissions would make the whole agent economy more trustworthy.
Two identical API calls can come from either intended behavior or a manipulated model, and today they look the same to the system. Permissions tied to a static identity don’t describe the real risk.
So the missing piece is verifying the agent’s declared intent and boundaries before execution, not just who sent the request.
That’s why this starts looking more like protocol infrastructure than a product feature.