You change an agent’s model. Do you review its access again?

Say you’ve been using a research agent for months. You know its work, and you’ve approved access to a few systems.

Then you swap the model behind it. Same name, same job, same permissions.

Do those approvals carry over?

We’ve been exploring this at Headless Domains. My view: an agent can keep its name through changes, but that shouldn’t mean every previous approval carries forward unchecked.

A hosting move might change very little. Access to a customer database changes the stakes.

We wrote about the distinction between identity, credentials, and permissions here:
https://headlessdomains.com/blog/what-is-agent-identity/

For anyone running agents: what triggers a fresh review in your setup?

Curious about rules you actually use, or a change that caught you off guard.