top of page

A01

Agent Identity & Authorisation

Each agent holds a unique non-human identity, distinct from any human user and from every other agent, and the credential material proving that identity is not shared with any other agent or user.

WHAT IT ADDRESSES

Actions cannot be attributed, and one compromised secret reaches several agents.

VERIFICATION METHOD

Identity register review; trace one sampled action to a single agent identity.

Five Eyes; OWASP T&M

bottom of page