An OBO flow allows an agent to request resources using a token that contains both the user identity and the agent identity. This dual-claim design makes it possible to trace who initiated an action and which agent executed it, solving major accountability gaps in current AI systems.