Topic
How AI agents are authenticated and authorized: credential and token scoping, agent identity providers, and authority propagation across agent actions.
ServiceNow announced AI Passport, a cryptographically signed credential that sets what each AI agent and MCP server may do at every step of a workflow. The prevention claims are ServiceNow's own description of a design.
Reality
The GA release registers KAGENT_STS_RESOURCE and KAGENT_STS_AUDIENCE with descriptions that name the RFC, then defaults both to empty, and whether that default is an exposure depends on what your own STS hands back.
Reality
The new Agentic IdP registers every agent Falcon Guardian finds, issues it a cryptographic identity and brokers short-lived tokens instead of credentials, which quietly makes your discovery coverage the thing that decides the rollout.
Reality
Lianlian DigiTech's Hong Kong filing names agent identity, spending limits and traceability as the product. Its cross-border economics say that control layer has to cost almost nothing.
Reality
Amazon says you should be able to name every AI agent touching customer data in under a minute. Its own worked example explains why most teams cannot: the record is a file on a laptop.
Reality
A devops.com essay argues durability, per-step identity and decision-level observability belong in the agent runtime, not layered on later. The failure economics support the claim.
Reality
Rain, Visa, Mastercard, Fiserv, Circle and Remitly have formed the Agentic Payments Alliance with about two dozen members, explicitly modelled on EMV. Plan to conform, not to define.
Reality
Version 1.1 of the Agentic Security Initiative's guide enumerates T1 through T17, up from fifteen. Cite the version, and stop reviewing agents one tool call at a time.
Reality