Standing authority is the bug; authority should decay and force re-auth.
Chart of an agent's authority level decaying over a session: minus ten percent time elapsed, minus thirty percent token budget, full revocation on context shift, then mandatory re-authorization.