You Can’t Control What You Can’t See

Every identity vendor now has an agent story: register your AI agent, give it a client ID, issue it a short-lived, narrowly scoped token, and log what it does. The story comes with clean diagrams, sensible standards and good demos. There is just one problem: the whole model assumes the agent knocks on the front […]