Engineering notes on authorizing AI agents - what breaks, what we build, and the numbers behind it. No listicles.