{"schema_version":"newruntime-agent-readable-v0.2","type":"tectonic_shift","stable_id":"tectonic_shift:delegated-agent-identity","slug":"delegated-agent-identity","title":"Borrowed human credentials -> delegated agent identity","description":"Autonomous agents are moving from borrowed user sessions and shared keys toward distinct identities with scoped authority, sponsors, expiry, and audit.","retrieval_nugget":"Autonomous agents are moving from borrowed user sessions and shared keys toward distinct identities with scoped authority, sponsors, expiry, and audit. Before: Agents borrow human sessions, shared API keys, or generic service accounts After: Each agent has scoped identity, delegation mode, sponsor, expiry, revocation, and audit Current stage: emerging; confidence is high.","status":"published","before_state":"Agents borrow human sessions, shared API keys, or generic service accounts","after_state":"Each agent has scoped identity, delegation mode, sponsor, expiry, revocation, and audit","stage":"emerging","confidence":"high","magic_decay_stage":"fragile-tool","first_seen":"2026-02-05","last_verified":"2026-07-29","record_date":"2026-07-29","date_kind":"last_verified","related_posts":["mcp-oauth-authorization-boundary"],"topics":["agent-identity","access-control","ai-security","enterprise-agents"],"source_urls":["https://www.nccoe.nist.gov/sites/default/files/2026-02/accelerating-the-adoption-of-software-and-ai-agent-identity-and-authorization-concept-paper.pdf","https://learn.microsoft.com/en-us/entra/agent-id/agent-identities","https://learn.microsoft.com/en-us/entra/agent-id/authorization-agent-id","https://aws.amazon.com/about-aws/whats-new/2026/07/oauth-aws-mcp-server/","https://blog.cloudflare.com/temporary-accounts/"],"routes":{"html":"https://newruntime.com/shifts/delegated-agent-identity/","markdown":"https://newruntime.com/shifts/delegated-agent-identity.md","json":"https://newruntime.com/shifts/delegated-agent-identity.json"},"source_format":"markdown","next_reads":[{"type":"related_material","path":"/posts/mcp-oauth-authorization-boundary/","reason":"Field Note documenting this shift.","url":"https://newruntime.com/posts/mcp-oauth-authorization-boundary/","title":"MCP and OAuth Put Agent Authorization on the Critical Path","media_type":"text/html"},{"type":"topic","path":"/topics/agent-identity/","reason":"Explore the agent identity topic hub.","url":"https://newruntime.com/topics/agent-identity/","title":"Agent Identity - New Runtime","media_type":"text/html"},{"type":"topic","path":"/topics/ai-security/","reason":"Explore the ai security topic hub.","url":"https://newruntime.com/topics/ai-security/","title":"AI Security - New Runtime","media_type":"text/html"},{"type":"related_material","path":"/signals/claude-tag-introduces-a-separate-agent-identity-model/","reason":"Shares access control and agent identity.","url":"https://newruntime.com/signals/claude-tag-introduces-a-separate-agent-identity-model/","title":"Claude Tag Introduces a Separate Agent Identity Model","media_type":"text/html"},{"type":"related_material","path":"/shifts/coding-agent-general-workbench/","reason":"Continue with a related New Runtime material.","url":"https://newruntime.com/shifts/coding-agent-general-workbench/","title":"Coding tool -> general-purpose workbench","media_type":"text/html"}]}