I think some standards org needs to define comprehensive agent permissions model first before the OS raises the abstraction to agent level authorization.

Might be that you'll need LLMs to define the model, as LLMs will immediately drive a truck through any hole the standard left in by accident. They're really good at this.