Your AI Assistant Has the Keys. But Who Is Really Logging In?

For decades, authentication has been built around a simple mental model: a user arrives at an application, responds to a challenge, and proves who they are with a password, an authenticator, a passkey, or some combination of factors. The application then lets them in. AI agents are quietly breaking that model.