Identity — 3 articles

3 articles from Crelis on Identity. Most recent: “An AI Agent Security Policy: What Belongs In One”.

• An AI Agent Security Policy: What Belongs In One — 27 September 2026

  A practical policy separates agent proposals from permission, names approval states, tests material changes, and keeps evidence for disputed actions.

• What OWASP's Agentic Threat Taxonomy Says About Authorization Failures — 8 September 2026

  OWASP gives agentic AI teams a threat model, not proof that a payment, deletion, or credit change was authorised.

• Identity Is Not Authorization Is Not Evidence: Three Questions Every AI Agent Raises — 22 August 2026

  Identity tells you who an AI agent is. Authorization tells you it was allowed to act. Evidence tells you that you can still prove both later, to someone who does not trust your dashboard, and that thi