Initial problem
Agents that send mail, sign up for services, or run code need accounts and tools of their own. Sharing personal accounts or pasting credentials into prompts makes access hard to audit and revoke. The agent should also keep its inbox and history when a team switches clients.


