{"type":"post","stable_id":"post:chaindrop-agent-identity-control-plane","slug":"chaindrop-agent-identity-control-plane","title":"ChainDrop Shows Why Agent Security Starts With Identity And Release Authority","description":"ChainDrop propagated through stolen npm, GitHub, cloud, Kubernetes, and Vault identities; IBM's agent identity model supplies the governance layer of scoped delegation, short-lived credentials, revocation, and signed audit trails.","retrieval_nugget":"The attack moved from a malicious npm preinstall hook to credential theft, package republishing, CI/OIDC abuse, and agent configuration persistence. The defensive unit is an attributable identity with task-scoped authority, not a shared secret inside an agent context.","published_at":"2026-08-04","updated_at":"2026-08-06","record_date":"2026-08-04","date_kind":"published_at","topics":["supply-chain-security","agent-identity","credentials","cicd","auditability"],"entities":["Microsoft","IBM","npm","GitHub"],"source_urls":["https://www.microsoft.com/en-us/security/blog/2026/08/04/chaindrop-supply-chain-compromise-anatomy-self-propagating-worm","https://www.ibm.com/solutions/agentic-ai-identity-management"],"source_format":"article","editorial_timing":{"lane":"regular_hourly","scheduled_at":"2026-08-07T14:00:00+03:00","real_news_delta":"owner-approved primary-source mechanism or merged analysis"},"visual_decision":{"status":"included","reason":"the central mechanism is a flow, loop, architecture, decision, or state transition that benefits from a diagram","reviewed_by":"codex"},"schema_version":"newruntime-agent-readable-v0.2","status":"published","visuals":[{"role":"hero","src":"/images/drip/chaindrop-agent-identity-control-plane/chaindrop-agent-identity-control-plane.webp","alt":"A whiteboard two-layer diagram showing the ChainDrop credential-propagation path beneath an identity control plane with scoped tokens, release gates, and audit trails.","caption":"New Runtime synthesis from ChainDrop supply chain compromise and agentic identity management."}],"routes":{"html":"https://newruntime.com/posts/chaindrop-agent-identity-control-plane/","markdown":"https://newruntime.com/posts/chaindrop-agent-identity-control-plane.md","json":"https://newruntime.com/posts/chaindrop-agent-identity-control-plane.json"}}