# Agent identity and audit

People and agents go through the same operations, the same permission checks and the same audit log.

- **Every write is signed.** The change history records the actor (a person, an API key or an OAuth app) and, for agents, the person they act for.
- **Agent edits are visible.** In the app, anything an agent wrote is marked in teal with its name, so you can see what no person touched.
- **Approved suggestions carry both names**: the agent that proposed it and the person who approved it.
- **Disconnecting is instant.** Revoking an OAuth app or an API key under Agents takes effect on its next call.
- **The change feed is readable by agents.** `list_changes` returns every write with who made it and which fields changed, paged with `next_cursor`.