Can We Actually Prove an AI Agent Will Stay Within Its Permissions?

I've been reading a lot of pieces this year about how AI agents get authorized: which protocol issues the token, which framework signs the card, and which policy engine checks the scope. Almost none of them ask the question that actually…