What should human approval bind to when agent resubmission changes the request hash?

docybo · reddit · 2026-08-24

A developer building an authorization layer for AI agents hit a replay/freshness edge case: a human approves a sensitive action, but the agent later resubmits it with a fresh nonce/timestamp, changing the request hash and invalidating the approval.

Options discussed: binding to the original request creates awkward replay/freshness exceptions; a caller-supplied actionid risks substitution; hashing "semantic" fields is hard to define safely. The author leans toward a trusted, stable action identity plus full re-evaluation on resubmission, and asks whether anyone has solved this cleanly in OPA, Cedar, or Cerbos-style PDP/PEP setups.

Original post →

More from coding & agent

coding & agent channel →