01 / The operating case
What changes in a real workflow?
A report-export task is queued while permitted, then its requester loses access before the export worker starts.
- 01Client / task
- 02MCP server
- 03Tool call + arguments
- 04Downstream effect
02 / Decision contract
What the executor must check
Persist the originating principal, task and target, recheck current authority before effect, and bind retrieval of task results to the same resource and tenant.
03 / Failure and evidence
What goes wrong, and what can be proven?
A valid task identifier is treated as a bearer grant to resume or retrieve another user’s result.
Record task creation, state changes, reauthorization, effect and result access.
04 / Canonical scope
Why this reference stands alone
MCP revocation treats withdrawn grants generally; this page owns queued execution and result retrieval.
Protocol or attack trace
Deferred task state
Export task is queued under grant G; G expires before worker start; another user obtains task ID.
Worker denies expired grant and result retrieval denies a principal outside task ownership.
Primary references