“A new access control model called "tool, task, and transaction-based access control" (T-back) is proposed for AI agents, operating on a principle of least privilege and ephemeral permissions.”