Campus Agent Identification and Scope-Down Access Control

AI agents operating in enterprise campus networks execute user- delegated tasks by invoking multiple tools and services, often without continuous user supervision. Traditional authorization models assume stable applications and human-driven interactions, creating a mismatch when applied to autonomous agents that can chain actions across heterogeneous systems. Campus environments also contain heterogeneous and legacy services across diverse protocols, making per-service agent-aware authorization difficult to deploy consistently. This document describes the problem space for campus agent access control and argues that agents require task-bound privilege reduction ("scope- down") and that enforcement can be provided by in-path network devices in order to preserve compatibility with existing systems.