Beyond Single-Use Tokens: Durable Authorization State for Replay-Resistant LLM Agent Actions
CapLease is introduced, an authorization-consumption layer that follows proposal- and authority-level defenses, binds an authenticated user confirmation to a canonical action, and enforces transactional Issue-Prepare-Commit transitions, which identifies durable authorization state, rather than token representation alone, as the systems requirement for replay-resistant agent execution.