Trusting AI Agents, Who Is Acting?

nicola.gallo@nitroagility.com (Nicola Gallo) — Tue, 05 May 2026 00:00:00 +0000

Who Is Acting?

AI agent security is usually approached as an identity problem: the question becomes “what is the agent’s identity, and what is it allowed to do?”. This framing is inherited from decades of human-centric and client-centric authorization design, and it works reasonably well as long as the entity being authorized is stable, persistent, and accountable in its own right. AI agents are none of those things in practice, and the framing produces a steady accumulation of edge cases that identity-centric security models keep trying to patch without changing the underlying assumption.

Agentic on

Trusting AI Agents, Who Is Acting?