Workday Is Buying Identity for AI Agents. Let's Build a Tiny Access Grant in TypeScript.

Workday plans to acquire C1.ai so agents get access when they are registered and lose it when their work or role ends. Build a tiny TypeScript access grant tied to the agent lifecycle: register, grant, check, revoke. No API key.