The original title is "How We Solved Agent Auth Without a Single PAT" which is 9 words. Let me check the rules:

Short summary

The article proposes a Trust On First Use (TOFU) authorization model for headless AI agents, inspired by SSH's host verification. Instead of issuing long-lived PATs or building custom OAuth for each integration, agents are identified by runtime fingerprints that a human approves once. Agents receive only short-lived session tokens, improving security, attribution, and revocation without changing existing agent frameworks.

• •AI agents need auth without browsers or humans present at runtime
• •TOFU model: approve agent fingerprint once, future requests are automatic
• •Agents never receive long-lived credentials—only short-lived session tokens

Generated with AI, which can make mistakes.