OAuth works great when a person clicks “Allow” once. With agents it falls short. After the token is issued, the system basically stops watching. It can’t tell if the agent’s behavior suddenly changed, if costs are piling up, or if sub-agents are chaining permissions in weird ways. The Kite whitepaper calls this being “economically blind.” Their answer is to keep OAuth 2.1 compatibility for existing services, but add session tokens that carry quotas, expiry and a proof chain back to you. $KITE #KiteBBW