AI agents need to read your email, call APIs, and make purchases on your behalf. Every one of those actions demands an answer to three questions. Who authorized this agent? What exactly can it do? And can the agent prove its authority on every call? This talk covers four standards-based identity patterns that answer them, with a live demo using the Vercel AI SDK.