Isabelle Williams uses a travel-planning application to explain how an agent can discover account and API access instructions. She describes an anonymous trial followed by a user claim flow that connects the work to an account.
Williams demonstrates an identity-assertion flow in which the agent asks permission to share user details and the application decides whether to create an account and what access to grant. She emphasizes signed assertions, audience checks and the application’s control over trust.
For an agent that can move travel funds, Williams issues a separate agent token with permissions limited by both the user and an agent-specific ceilingAn agent permission boundary defines and enforces which resources and actions an automated agent is allowed to use.. Her demonstration illustrates auditing, revocation and the difference between an agent changing a budget and a user changing it.
Watch on YouTube
