Comment by kifler

There is GNAP (https://datatracker.ietf.org/doc/rfc9635/) which is predicated on PBAC. Particular for agentic AI, I think it is sort of falling into a sort of RXC model: read/execute (inc. write), and commit. The X portion is a bit wonky but basically comes down to can the agent trigger a function.