Treating agents and guests as proper principals, rather than borrowing someone else’s login, is what makes per-agent rules, clean audit and individual revocation possible.
Principal
Any party that can be identified and granted permissions: a person, an AI agent, a service, a guest or an organisation.
Example
In one request there are several principals: Sarah, the employee; her Claude connection, the agent; and ABC Practice, the organisation whose policies apply.