The Machine-Action Boundary

Counts differ because each database indexes a different set of publications. We treat OpenAlex as the canonical count; Google Scholar is not shown (no API, and crawling it violates its ToS).

This working paper proposes receiver-side controls for consequential actions taken by AI agents. It argues that systems accepting agent requests need verifiable evidence of who authorized each request, the scope and duration of that authority, and how it may be delegated. The proposal combines a machine-authority record, expiring and narrowing delegation, and receiver-controlled acceptance brakes alongside developer safeguards. It is informed by more than 80 interviews across six regulated industries, weighted toward insurance in the United Kingdom and United States.