Humans have IAM. Agents need AAM — Agent Authorization Management. Cryptographic permission receipts before tools touch the real world. SQL is door one. Stripe handles AI payments; SQLGuard handles AI permission.
This is AI Action Authorization: Agent → Policy → Signed receipt → Real-world action. Without a PASS, the tool must fail closed.