Agent identity and audit

People and agents go through the same operations, the same permission checks and the same audit log.

• Every write is signed. The change history records the actor (a person, an API key or an OAuth app) and, for agents, the person they act for.
• Agent edits are visible. In the app, anything an agent wrote is marked in teal with its name, so you can see what no person touched.
• Approved suggestions carry both names: the agent that proposed it and the person who approved it.
• Disconnecting is instant. Revoking an OAuth app or an API key under Agents takes effect on its next call.
• The change feed is readable by agents. list_changes returns every write with who made it and which fields changed, paged with next_cursor.