Token Launches Rehearsal Agent with Session-Aware Identity Controls
Token built and red-teamed a browser-based UI agent called Rehearsal that operates within authenticated user sessions, deliberately violating conventional identity, least-privilege, and traceability controls to expose the structural gaps in how web applications handle agent-driven sessions. The exercise produced a concrete set of defensive best practices — including agent-distinct identity signalling, read-only scope enforcement, and per-session action recording — that organisations can apply today when they control both the agent and the target application. The residual gap is significant: these controls only work end-to-end when the same party owns both the agent and the application, leaving third-party agents driving enterprise SaaS largely invisible to downstream platforms.