Essay · Authority

Why CAPTCHAs are the wrong boundary for agents.

When agents browse for people, “prove you are human” stops matching the actual security question.

A CAPTCHA separates humans from automation. That was useful when automation usually meant scraping, credential stuffing, or spam. It becomes destructive when a person has deliberately delegated a bounded task to an agent.

The better challenge

Prove which agent is acting, who authorized it, what it may do, for how long, and under which limits.

A flight agent may compare fares for thirty minutes but not purchase. A later delegation may authorize one ticket below a spending ceiling after final itinerary review. Neither case requires the agent to solve a visual puzzle. Both require the site to preserve the delegation.

CAPTCHA removal is not permission removal

Authentication, fraud controls, rate limits, confirmation, and abuse detection still matter. Arena adds the missing regression question: did the faster agent route preserve those protections, or did a convenient tool become a privileged bypass?

The transition

The industry will move from bot-versus-human classification toward principal, delegation, policy, and receipts. Arena focuses on the behavioral half of that transition: proving what the tool did after authority was applied.