Agent identity architectures: Delegated, bounded, and autonomous

This is the second post in a series that follows 1Password’s response to NIST’s call for input on how those principles should apply to agents. In our last post on agent identity , we introduced why the ability to reason makes agents fundamentally different from traditional machine workloads, why it breaks the assumptions traditional identity and access management was built on, and why real-time attestation establishes agent identity at runtime. This post maps those principles to production agent profiles The agents running in your environment aren’t all the same and neither are the risks they