Status: Epic — not yet planned. Originally carved out from #1412 as a deferred follow-up; promoted to its own epic. Child tickets will be opened during planning.
Thesis
Resource credentials today are bound to the environment (environments.githubAccountId), not the persona/agent — so the same persona acts as different identities depending on where it runs, and a fleet shares ambient authority (confused-deputy). Tie resource credentials to the persona/agent so an agent acts as itself regardless of environment.
Likely shape
Probably involves porting aspects of nick-pape/mcp-gateway (OBO / standalone delegation model) to TypeScript. Concrete design, schema, and child-ticket breakdown to come.
Thesis
Resource credentials today are bound to the environment (
environments.githubAccountId), not the persona/agent — so the same persona acts as different identities depending on where it runs, and a fleet shares ambient authority (confused-deputy). Tie resource credentials to the persona/agent so an agent acts as itself regardless of environment.Likely shape
Probably involves porting aspects of nick-pape/mcp-gateway (OBO / standalone delegation model) to TypeScript. Concrete design, schema, and child-ticket breakdown to come.