CAISI framed the work around the observation that agents lack standard ways to prove who they are, what they are allowed to do and on whose behalf, which is the root of most 2025 and 2026 agent incidents. Industry participation includes the major platform vendors and the Coalition for Secure AI.
What to do: track the identity and authorisation work as the likely basis for federal procurement requirements, and align internal agent identity designs with delegated, task-scoped, expiring credentials now.
