Good question. I think both are practical building blocks today, especially Biscuit for agent workflows. But neither understands human intent by itself. A trusted broker still needs to turn approval into a narrowly scoped token: this action, on this resource, within this time and budget. So I’d say the cryptography is ready; the surrounding product layer is still early. The difficult parts are approval UX, translating intent into exact constraints, revocation, and audit. Macaroons or Biscuit could be part of the solution, but not the whole solution.