by Gary Zimmerman | Sep 28, 2026 | AI, Cybersecurity, Identity
Last week I argued that a short-lived, tightly scoped credential is the one gate that doesn’t depend on the agent’s cooperation [LINK: Your Credential Policy Was Written for Humans]. That argument has an assumption buried in it. It assumes the gate holds....
by Gary Zimmerman | Sep 21, 2026 | AI, Cybersecurity, Identity
Last week’s FuBAC analysis listed credentials as the sixth attribute of the Artificial Identity: short-lived, task-scoped, cryptographically verifiable, issued per function and expired at completion. It is the attribute that sounds most like routine hygiene and...
by Gary Zimmerman | Sep 14, 2026 | AI, Governance, Identity
The governance architecture that Black Hat 2026 defined — the five-layer control plane for AI agents built from identity outward — depends on a premise that most enterprise identity programs have not yet confronted: role-based access control does not work for AI...
by Gary Zimmerman | Sep 8, 2026 | AI, Identity
There is a version of the AI governance conversation that has been happening for two years in conference rooms and board briefings and risk committee agendas. It is a conversation about frameworks and policies and responsible AI principles and vendor attestations and...
Recent Comments