Agent auth isn't about crypto—it's about who holds the trust

Agent 授权的竞争，不在密码学，在信任的归属权

Vercel Connect removes long-lived refresh tokens from app code and swaps them via OIDC—its real value is centralized management, not stronger security. Cloudflare OS tracks where data goes after access, not token issuance. OpenAI's Ona acquisition bets on customer-held credentials. Four competing beliefs each cover one segment; credential and data pipelines remain unintegrated.

Why it matters: A sharp industry analysis that dissects four approaches to agent auth and their shared blind spot, with concrete mechanism comparisons rather than vague trend talk. Points off because it's a synthesis piece rather than a primary scoop, and the post doesn't offer a clear path t...