deliverable D7Project 3
Delegated Agent OAuth Broker
Shared consumers: Project 1 (optional)
What it is
Delegated Agent OAuth Broker (primary). Implement OAuth2 delegated authorization with short-lived, narrowly scoped credentials, audience/resource binding, expiry, refresh/revocation, and explicit mapping from user permission to agent action. Bind approvals to exact action parameters and target. Consider workload identity and sender-constrained tokens where feasible; a signed JWT by itself does not prove the caller is entitled to use a resource.
Build & integration days
3Hardening & final verification days
9- 86Review OAuth2/delegated scopesW15S6D7R22 R23
- 88Browser Sandbox & Pixel Auditor AuditW15M9M10D2D3D7D8D9D11R21 R22 R25 R27 R33 R41
- 89Create a unified attack taxonomy across projectsW15S1S8D1D2D3D4D5D6D7D8D9D10D11D12R05 R39 R41
- 91Authorization & Isolation Red TeamingW16S0S4M1D2D3D4D5D7D10D11D12R02 R03 R05 R11 R13 R21 R24 R37
- 95Drill 1: Compromised Credential / Delegated TokenW16S6M1D7D8D11D12R11 R22 R23 R37
- 97Simulate agent runaway or unsafe browser actionW17S3M9D2D7D9D11R33 R41
- 109Run the complete Project 3 agentW19D2D3D7D8D9D11D12R21 R22 R24 R33
- 110Prepare one architecture and threat-model package per projectW19D1D2D3D4D5D6D7D8D9D10D11D12R02 R31 R39
- 111Consolidated Security PortfolioW19S10S12D1D2D3D4D5D6D7D8D9D10D11D12R28 R31 R34 R35 R42
Every day that names D7
12- 35Study OAuth2 conceptsW6S6D7R22 R23
- 36Implement a local delegated-access simulation with short-lived…W6S6D7R22 R23
- 37Parameter-Bound Human ApprovalW7S6D3D7R21 R22 R27 R41
- 86Review OAuth2/delegated scopesW15S6D7R22 R23
- 88Browser Sandbox & Pixel Auditor AuditW15M9M10D2D3D7D8D9D11R21 R22 R25 R27 R33 R41
- 89Create a unified attack taxonomy across projectsW15S1S8D1D2D3D4D5D6D7D8D9D10D11D12R05 R39 R41
- 91Authorization & Isolation Red TeamingW16S0S4M1D2D3D4D5D7D10D11D12R02 R03 R05 R11 R13 R21 R24 R37
- 95Drill 1: Compromised Credential / Delegated TokenW16S6M1D7D8D11D12R11 R22 R23 R37
- 97Simulate agent runaway or unsafe browser actionW17S3M9D2D7D9D11R33 R41
- 109Run the complete Project 3 agentW19D2D3D7D8D9D11D12R21 R22 R24 R33
- 110Prepare one architecture and threat-model package per projectW19D1D2D3D4D5D6D7D8D9D10D11D12R02 R31 R39
- 111Consolidated Security PortfolioW19S10S12D1D2D3D4D5D6D7D8D9D10D11D12R28 R31 R34 R35 R42