<div dir="ltr"><div>Those ideas are completely broken.</div><div>If an agent, on behalf of a legal person, is allowed to order and pay for goods, then a legal contract was created and satisfied.</div><div>Anything else is not agency.</div><div>So the question is, do we have an agent or not?</div><table></table><div>.<a href="https://www.law.cornell.edu/wex/agent">https://www.law.cornell.edu/wex/agent</a></div><div><br></div><div><div dir="ltr" class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><font face="-apple-system, system-ui, system-ui, Segoe UI, Roboto, Helvetica Neue, Fira Sans, Ubuntu, Oxygen, Oxygen Sans, Cantarell, Droid Sans, Apple Color Emoji, Segoe UI Emoji, Segoe UI Symbol, Lucida Grande, Helvetica, Arial, sans-serif" color="#38761d"><span style="font-size:14px;background-color:rgb(242,242,242)">Peace ..tom jones</span></font></div></div></div><br></div><br><div class="gmail_quote gmail_quote_container"><div dir="ltr" class="gmail_attr">On Sun, Jul 20, 2025 at 9:56 AM Eve Maler <<a href="mailto:eve@vennfactory.com">eve@vennfactory.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
<div>
<div>Feeling philosophical today: Is there room to square this circle?</div>
<div><br>
</div>
<div>There’s an emerging field of relational AI (vs. transactional — behaviors vs. actions). I’ve been talking to the <a href="https://kaystoner.substack.com" target="_blank">developer</a> of a number of custom GPTs that are aligned with very precisely drawn personas — and,
yes, have also been playing with some of them. The outputs are indeed variable but the behaviors are designed to provide certain kinds of interactive support. Their design also includes some guardrails and some level of transparency.</div>
<div><br>
</div>
<div>Maybe what needs to come first, before we can trust a high-autonomy-level transactional agent, is measurable behavioral alignment with their human delegator (Agentic Assurance Level? :-) ). Perhaps only then can we start to assess the alignment of any
actions that agent takes.</div>
<div><br>
</div>
<div>(Human delegates are not immune to misalignment with their delegator, of course, which is why agency law and the concept of fiduciary duty exist. I doubt AI agents will win humanlike legal status any time soon, but if they are ever to get anywhere near
it, they’ll need to solve these sorts of issues.)</div>
<div><br>
</div>
<div>Eve</div>
<br id="m_-191057629994196508lineBreakAtBeginningOfMessage">
<div><span><img alt="VF Logo Light Green Mix (on Dark BG) for email sig.png" src="cid:ii_198297f0beccb390341"></span><br style="font-family:Helvetica;font-size:12px;font-style:normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;text-decoration:none;color:rgb(0,0,0)">
<br style="font-family:Helvetica;font-size:12px;font-style:normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;text-decoration:none;color:rgb(0,0,0)">
<div style="font-family:Helvetica;font-size:12px;font-style:normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;text-decoration:none;color:rgb(0,0,0)">
<span style="color:rgb(71,100,88);font-family:SpaceGrotesk-Medium">Eve Maler, president and founder</span></div>
<div style="font-family:Helvetica;font-size:12px;font-style:normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;text-decoration:none;color:rgb(0,0,0)">
<font color="#476458" face="SpaceGrotesk-Medium">Cell and Signal <a href="tel:+1-425-345-6756" target="_blank">+1 (425) 345-6756</a><br>
</font></div>
</div>
<div><br>
<blockquote type="cite">
<div>On Jul 19, 2025, at 12:33 PM, Tom Jones via Openid-aiim <<a href="mailto:openid-aiim@lists.openid.net" target="_blank">openid-aiim@lists.openid.net</a>> wrote:</div>
<br>
<div>
<div dir="ltr">
<div>
<p>non-deterministic agents do present serious challenges to <strong>trust</strong>,
<strong>security</strong>, and <strong>governance</strong>. In domains like digital identity, law, finance, and public infrastructure,
<strong>unpredictability</strong> isn't just inconvenient—it’s potentially <strong>
unacceptable</strong>. Let’s break down why:</p>
<div></div>
<h3>⚠️ <strong>Why Non-Determinism Breeds Unacceptability</strong></h3>
<ul>
<li>
<p><strong>Inconsistent behavior</strong>: Agents that act differently under the same conditions can’t be reliably audited or certified.</p>
</li><li>
<p><strong>Untraceable outputs</strong>: It becomes hard to pinpoint cause, responsibility, or compliance status.</p>
</li><li>
<p><strong>Vulnerability to manipulation</strong>: Adversaries can exploit probabilistic logic to induce unwanted outcomes.</p>
</li><li>
<p><strong>Loss of control</strong>: Especially in systems involving user consent or legal transactions, determinism enables meaningful boundaries.</p>
</li></ul>
<div>The above is what a bing bot thinks of this idea. I agree with it.</div>
</div>
<div>
<div dir="ltr" class="gmail_signature">
<div dir="ltr"><font face="-apple-system, system-ui, system-ui, Segoe UI, Roboto, Helvetica Neue, Fira Sans, Ubuntu, Oxygen, Oxygen Sans, Cantarell, Droid Sans, Apple Color Emoji, Segoe UI Emoji, Segoe UI Symbol, Lucida Grande, Helvetica, Arial, sans-serif" color="#38761d"><span style="font-size:14px;background-color:rgb(242,242,242)">Peace
..tom jones</span></font></div>
</div>
</div>
<br>
</div>
<br>
<div class="gmail_quote">
<div dir="ltr" class="gmail_attr">On Sat, Jul 19, 2025 at 10:19 AM Ayesha Dissanayaka <<a href="mailto:ayshsandu@gmail.com" target="_blank">ayshsandu@gmail.com</a>> wrote:<br>
</div>
<blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
<div dir="ltr">Hi Tom,
<div><br>
Thank you for your input. Of course, defining an agent is a top priority when considering IAM. It's the very first term in the <a href="https://github.com/openid/cg-ai-identity-management/blob/main/deliverable/taxonomy.md" style="font-family:Arial,sans-serif;font-size:14.6667px;text-decoration-line:none" target="_blank"><span style="font-size:11pt;background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;text-decoration-line:underline;vertical-align:baseline">taxonomy
document</span></a> that the CG is constructing. 😃</div>
<div><br>
</div>
<div>Major AI framework providers have their definitions for AI agents, as I tried to summarize
<a href="https://docs.google.com/document/d/1PhWC4KRO00kOPUW113ldG06Vii5dZjW3ljiV1tA0GCc/edit?tab=t.1iyru8xdjt9u" target="_blank">
here.</a>. We can draw some inspiration from them when constructing a definition for the AI agents in the context of IAM for Agents. </div>
<div><br>
On your suggestion for the agent definition, the term "consistent behavior" might not go well with an agent, as agents are, by design, undeterministic and dynamic. If you ask an agent to do the same thing twice, there is a fair chance that it will do the task
differently, unlike a traditional application or a workload. </div>
<div><br>
</div>
</div>
<br>
<div class="gmail_quote">
<div dir="ltr" class="gmail_attr">On Sat, Jul 19, 2025 at 12:19 AM Tom Jones <<a href="mailto:thomasclinganjones@gmail.com" target="_blank">thomasclinganjones@gmail.com</a>> wrote:<br>
</div>
<blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
<div dir="ltr">
<div>you talk about giving ai agents and id, but there appears to be no definition of what an agent must be to deserve an ID.</div>
<div>Let's do that - how about this.</div>
<div><br>
</div>
<div><span style="color:rgb(68,71,70);font-family:"Google Sans",Roboto,sans-serif;font-size:14px;letter-spacing:0.2px;background-color:rgba(68,71,70,0.08)">An agent is a persistent collection of software and language models together in a workload with a consistent
behavior (identity) for the duration of the validity of an assigned Identifier.</span><br style="color:rgb(68,71,70);font-family:"Google Sans",Roboto,sans-serif;font-size:14px;letter-spacing:0.2px">
<span style="color:rgb(68,71,70);font-family:"Google Sans",Roboto,sans-serif;font-size:14px;letter-spacing:0.2px;background-color:rgba(68,71,70,0.08)">An agent can be delegated authority by Entities, that is by named objects.</span></div>
<div><span style="color:rgb(68,71,70);font-family:"Google Sans",Roboto,sans-serif;font-size:14px;letter-spacing:0.2px;background-color:rgba(68,71,70,0.08)"><br>
</span></div>
<div>
<div dir="ltr" class="gmail_signature">
<div dir="ltr"><font face="-apple-system, system-ui, system-ui, Segoe UI, Roboto, Helvetica Neue, Fira Sans, Ubuntu, Oxygen, Oxygen Sans, Cantarell, Droid Sans, Apple Color Emoji, Segoe UI Emoji, Segoe UI Symbol, Lucida Grande, Helvetica, Arial, sans-serif" color="#38761d"><span style="font-size:14px;background-color:rgb(242,242,242)">Peace
..tom jones</span></font></div>
</div>
</div>
<br>
</div>
<br>
<div class="gmail_quote">
<div dir="ltr" class="gmail_attr">On Fri, Jul 18, 2025 at 10:49 AM Ayesha Dissanayaka via Openid-aiim <<a href="mailto:openid-aiim@lists.openid.net" target="_blank">openid-aiim@lists.openid.net</a>> wrote:<br>
</div>
<blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
<div dir="ltr">Hi All,
<div><br>
Thanks, everyone, for your comments on the thoughts on the doc. And I had a great time discussing this during the CG meeting yesterday. Following up on our <a href="https://github.com/openid/cg-ai-identity-management/wiki/20250717-%E2%80%90-Meeting-notes:-July-17,-2025#ayeshas-agent-identity-discussion-iam-need-for-agentic-ai---brainstorming" target="_blank">discussion
i</a>n the last CG meeting, I am moving this conversation to email so that it's easier to comment and gather thoughts from everyone. Please refer to <a href="https://docs.google.com/document/d/1PhWC4KRO00kOPUW113ldG06Vii5dZjW3ljiV1tA0GCc/edit?tab=t.0" target="_blank">this</a><a href="https://docs.google.com/document/d/1PhWC4KRO00kOPUW113ldG06Vii5dZjW3ljiV1tA0GCc/edit?tab=t.0" target="_blank">
documen</a>t for detailed information. <br>
<span id="m_-191057629994196508m_-3125491409959772223m_-6184265058338082516m_695393711950020678gmail-docs-internal-guid-01ffaf10-7fff-6f1f-2ec2-30020c9bf82f">
<p dir="ltr" style="line-height:1.71429;margin-top:12pt;margin-bottom:12pt"><span style="font-size:10.5pt;font-family:Arial,sans-serif;color:rgb(26,28,30);background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline">The
complexity of AI-native applications, when considering GenAI, has progressed in added stages of complexity :</span></p>
<ol style="margin-top:0px;margin-bottom:0px">
<li dir="ltr" style="list-style-type:decimal;font-size:10.5pt;font-family:Arial,sans-serif;color:rgb(26,28,30);background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline;white-space:pre-wrap">
<p dir="ltr" style="line-height:1.71429;margin-top:11pt;margin-bottom:0pt" role="presentation">
<span style="font-size:10.5pt;background-color:transparent;font-weight:700;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline">Task-Specific AI:</span><span style="font-size:10.5pt;background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline">
Simple applications using LLMs for specific tasks like text generation.</span></p>
</li><li dir="ltr" style="list-style-type:decimal;font-size:10.5pt;font-family:Arial,sans-serif;color:rgb(26,28,30);background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline;white-space:pre-wrap">
<div style="line-height:1.71429;margin-top:0pt;margin-bottom:0pt"><span style="font-size:10.5pt;background-color:transparent;font-weight:700;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline">RAG-Enabled
AI:</span><span style="font-size:10.5pt;background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline"> Applications that can access and synthesize external knowledge bases.</span></div>
</li><li dir="ltr" style="list-style-type:decimal;font-size:10.5pt;font-family:Arial,sans-serif;color:rgb(26,28,30);background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline;white-space:pre-wrap">
<div style="line-height:1.71429;margin-top:0pt;margin-bottom:0pt"><span style="font-size:10.5pt;background-color:transparent;font-weight:700;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline">Apps
that include Agents:</span><span style="font-size:10.5pt;background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline"> Applications where agents can make decisions and execute
tasks on a user's behalf.</span></div>
</li><li dir="ltr" style="list-style-type:decimal;font-size:10.5pt;font-family:Arial,sans-serif;color:rgb(26,28,30);background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline;white-space:pre-wrap">
<p dir="ltr" style="line-height:1.71429;margin-top:0pt;margin-bottom:11pt" role="presentation">
<span style="font-size:10.5pt;background-color:transparent;font-weight:700;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline">Agent Teammates:</span><span style="font-size:10.5pt;background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline">
The current frontier, where agents act on their own accord and collaborate with humans in shared workflows.</span></p>
</li></ol>
<p dir="ltr" style="line-height:1.71429;margin-top:11pt;margin-bottom:0pt;padding:0pt 0pt 14pt">
<span style="font-size:10.5pt;font-family:Arial,sans-serif;color:rgb(26,28,30);background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline">This evolution presents exciting opportunities,
but it also brings a new set of challenges, particularly in how we manage identity and access. To ensure we build a secure and trustworthy ecosystem for these agents, we need to establish a robust set of IAM best practices.</span></p>
<p dir="ltr" style="line-height:1.71429;margin-top:0pt;margin-bottom:14pt"><span style="font-size:10.5pt;font-family:Arial,sans-serif;color:rgb(26,28,30);background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline">Here
are some of the key requirements that we should be thinking about:</span></p>
<ul style="margin-top:0px;margin-bottom:0px">
<li dir="ltr" style="list-style-type:disc;font-size:10.5pt;font-family:Arial,sans-serif;color:rgb(26,28,30);background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline;white-space:pre-wrap">
<p dir="ltr" style="line-height:1.71429;margin-top:11pt;margin-bottom:0pt" role="presentation">
<span style="font-size:10.5pt;background-color:transparent;font-weight:700;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline">Seamless Integration:</span><span style="font-size:10.5pt;background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline">
Agents need to interact with existing systems, like those using OAuth, with minimal disruption.</span></p>
</li><li dir="ltr" style="list-style-type:disc;font-size:10.5pt;font-family:Arial,sans-serif;color:rgb(26,28,30);background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline;white-space:pre-wrap">
<div style="line-height:1.71429;margin-top:0pt;margin-bottom:0pt"><span style="font-size:10.5pt;background-color:transparent;font-weight:700;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline">Flexible
Action:</span><span style="font-size:10.5pt;background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline"> Agents should be able to act on their own or securely on behalf of
a user or another entity.</span></div>
</li><li dir="ltr" style="list-style-type:disc;font-size:10.5pt;font-family:Arial,sans-serif;color:rgb(26,28,30);background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline;white-space:pre-wrap">
<div style="line-height:1.71429;margin-top:0pt;margin-bottom:0pt"><span style="font-size:10.5pt;background-color:transparent;font-weight:700;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline">Just-in-Time
Permissions:</span><span style="font-size:10.5pt;background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline"> To mitigate risks from the non-deterministic nature of agents,
we need mechanisms for granting just-enough access, precisely when it's needed.</span></div>
</li><li dir="ltr" style="list-style-type:disc;font-size:10.5pt;font-family:Arial,sans-serif;color:rgb(26,28,30);background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline;white-space:pre-wrap">
<div style="line-height:1.71429;margin-top:0pt;margin-bottom:0pt"><span style="font-size:10.5pt;background-color:transparent;font-weight:700;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline">Clear
Accountability:</span><span style="font-size:10.5pt;background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline"> There must be a designated responsible party for an agent's
actions.</span></div>
</li><li dir="ltr" style="list-style-type:disc;font-size:10.5pt;font-family:Arial,sans-serif;color:rgb(26,28,30);background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline;white-space:pre-wrap">
<div style="line-height:1.71429;margin-top:0pt;margin-bottom:0pt"><span style="font-size:10.5pt;background-color:transparent;font-weight:700;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline">Auditable
Traceability:</span><span style="font-size:10.5pt;background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline"> All agent actions should be traceable back to their identity
and the delegating authority.</span></div>
</li><li dir="ltr" style="list-style-type:disc;font-size:10.5pt;font-family:Arial,sans-serif;color:rgb(26,28,30);background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline;white-space:pre-wrap">
<div style="line-height:1.71429;margin-top:0pt;margin-bottom:0pt"><span style="font-size:10.5pt;background-color:transparent;font-weight:700;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline">Agent-Specific
Controls:</span><span style="font-size:10.5pt;background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline"> Resource servers may need to identify and apply specific controls
for actions initiated by agents.</span></div>
</li><li dir="ltr" style="list-style-type:disc;font-size:10.5pt;font-family:Arial,sans-serif;color:rgb(26,28,30);background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline;white-space:pre-wrap">
<p dir="ltr" style="line-height:1.71429;margin-top:0pt;margin-bottom:11pt" role="presentation">
<span style="font-size:10.5pt;background-color:transparent;font-weight:700;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline">Lifecycle Management:</span><span style="font-size:10.5pt;background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline">
We need clear governance for the entire lifecycle of an agent, from onboarding to decommissioning.</span></p>
</li></ul>
<p dir="ltr" style="line-height:1.71429;margin-top:11pt;margin-bottom:14pt"><span style="font-size:10.5pt;font-family:Arial,sans-serif;color:rgb(26,28,30);background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline">This
is a pivotal moment for us to lead the way in defining the standards and best practices that will shape the future of agentic AI. To get the ball rolling, let's consider a few key questions:</span></p>
<ol style="margin-top:0px;margin-bottom:0px">
<li dir="ltr" style="list-style-type:decimal;font-size:10.5pt;font-family:Arial,sans-serif;color:rgb(26,28,30);background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline;white-space:pre-wrap">
<p dir="ltr" style="line-height:1.71429;margin-top:11pt;margin-bottom:0pt" role="presentation">
<span style="font-size:10.5pt;background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline">Where can we apply
</span><span style="font-size:10.5pt;background-color:transparent;font-weight:700;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline">existing standards and best practices</span><span style="font-size:10.5pt;background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline">?</span></p>
</li><li dir="ltr" style="list-style-type:decimal;font-size:10.5pt;font-family:Arial,sans-serif;color:rgb(26,28,30);background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline;white-space:pre-wrap">
<div style="line-height:1.71429;margin-top:0pt;margin-bottom:0pt"><span style="font-size:10.5pt;background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline">What are the
</span><span style="font-size:10.5pt;background-color:transparent;font-weight:700;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline">novel problems</span><span style="font-size:10.5pt;background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline">
that existing solutions can't address?</span></div>
</li><li dir="ltr" style="list-style-type:decimal;font-size:10.5pt;font-family:Arial,sans-serif;color:rgb(26,28,30);background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline;white-space:pre-wrap">
<div style="line-height:1.71429;margin-top:0pt;margin-bottom:0pt"><span style="font-size:10.5pt;background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline">Where do we
need to </span><span style="font-size:10.5pt;background-color:transparent;font-weight:700;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline">extend current standards or innovate</span><span style="font-size:10.5pt;background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline">?</span></div>
</li><li dir="ltr" style="list-style-type:decimal;font-size:10.5pt;font-family:Arial,sans-serif;color:rgb(26,28,30);background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline;white-space:pre-wrap">
<div style="line-height:1.71429;margin-top:0pt;margin-bottom:0pt"><span style="font-size:10.5pt;background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline">How should
an </span><span style="font-size:10.5pt;background-color:transparent;font-weight:700;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline">agent's identity</span><span style="font-size:10.5pt;background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline">
be defined and structured?</span></div>
</li><li dir="ltr" style="list-style-type:decimal;font-size:10.5pt;font-family:Arial,sans-serif;color:rgb(26,28,30);background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline;white-space:pre-wrap">
<div style="line-height:1.71429;margin-top:0pt;margin-bottom:0pt"><span style="font-size:11pt;background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline">Develop
a shared vocabulary for scenarios, actors, and challenges.</span></div>
</li><ul style="margin-top:0px;margin-bottom:0px">
<li dir="ltr" style="list-style-type:circle;font-size:11pt;font-family:Arial,sans-serif;background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline;white-space:pre-wrap">
<div style="line-height:1.38;margin-top:0pt;margin-bottom:0pt"><span style="font-size:11pt;background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline">Happening at
</span><a href="https://github.com/openid/cg-ai-identity-management/blob/main/deliverable/taxonomy.md" style="text-decoration-line:none" target="_blank"><span style="font-size:11pt;background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;text-decoration-line:underline;vertical-align:baseline">https://github.com/openid/cg-ai-identity-management/blob/main/deliverable/taxonomy.md</span></a><span style="font-size:11pt;background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline">
as initiated at AIIM-CG</span></div>
</li></ul>
</ol>
<p dir="ltr" style="line-height:1.71429;margin-top:11pt;margin-bottom:0pt;padding:0pt 0pt 14pt">
<span style="font-size:10.5pt;font-family:Arial,sans-serif;color:rgb(26,28,30);background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline">Please share your thoughts, any references,
and any ideas you might have on the above.</span></p>
<p dir="ltr" style="line-height:1.71429;margin-top:0pt;margin-bottom:14pt"><span style="font-size:10.5pt;font-family:Arial,sans-serif;color:rgb(26,28,30);background-color:transparent;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline">Looking
forward to continuing the discussion.</span></p>
</span><br>
</div>
</div>
<br>
<div class="gmail_quote">
<div dir="ltr" class="gmail_attr">On Wed, Jul 9, 2025 at 10:04 PM Ayesha Dissanayaka <<a href="mailto:ayshsandu@gmail.com" target="_blank">ayshsandu@gmail.com</a>> wrote:<br>
</div>
<blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
<div dir="ltr">
<div>Thanks, Alex, for the comments. </div>
<br>
<div class="gmail_quote">
<div dir="ltr" class="gmail_attr">On Mon, Jul 7, 2025 at 8:41 PM Alex Babeanu <<a href="mailto:alex.babeanu@indykite.com" target="_blank">alex.babeanu@indykite.com</a>> wrote:<br>
</div>
<blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
<div dir="ltr">Added some comments to the doc, thanks for sharing Ayesha. This could serve as a starting point for discussion...
<div>A side question, could we use a common share drive to such docs or material ?</div>
</div>
</blockquote>
<div>Sure, if the CG has such a shared space, I can move the doc there. </div>
<div><a aria-haspopup="menu" href="mailto:atul@sgnl.ai" rel="noopener noreferrer" style="box-sizing:inherit;color:rgb(11,76,140);font-family:Slack-Lato,Slack-Fractions,appleLogo,sans-serif;font-size:15px;font-variant-ligatures:common-ligatures" target="_blank">Athul</a>, do
we have any such for the AIIM CG?</div>
<div><br>
</div>
<blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
<div dir="ltr">
<div><br>
</div>
<div>Cheers,</div>
<div><br>
</div>
<div>./\.</div>
</div>
<br>
<div class="gmail_quote">
<div dir="ltr" class="gmail_attr">On Thu, Jul 3, 2025 at 10:56 AM Ayesha Dissanayaka <<a href="mailto:ayshsandu@gmail.com" target="_blank">ayshsandu@gmail.com</a>> wrote:<br>
</div>
<blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
<div dir="ltr">Hi All,
<div><br>
</div>
<div>It's great to be part of this exciting community to discuss IAM for the Agentic Era. </div>
<div><br>
</div>
<div>Bubbling up a discussion in the Slack channel, I'm sharing this analysis on emerging
<a href="https://docs.google.com/document/d/1PhWC4KRO00kOPUW113ldG06Vii5dZjW3ljiV1tA0GCc/edit?tab=t.0#heading=h.secnaj745bir" target="_blank">
IAM challenges from Agentic AI</a> systems that now function as autonomous workforce members, and how we can approach addressing them.<br>
<p>I'd love to hear working groups' thoughts on this, and collaborate to extend this work to commonly identify the IAM problems we need to be solving for agentic AI systems and how.</p>
<p>I'm happy to discuss these findings at an upcoming meeting. Till then, let's collaborate on the mailing list and in the
<a href="https://docs.google.com/document/d/1PhWC4KRO00kOPUW113ldG06Vii5dZjW3ljiV1tA0GCc/edit?tab=t.0#heading=h.secnaj745bir" target="_blank">
doc</a> itself.</p>
<p>Cheers!</p>
<p>- Ayesha</p>
<br>
</div>
</div>
-- <br>
Openid-aiim mailing list<br>
<a href="mailto:Openid-aiim@lists.openid.net" target="_blank">Openid-aiim@lists.openid.net</a><br>
<a href="https://lists.openid.net/mailman/listinfo/openid-aiim" rel="noreferrer" target="_blank">https://lists.openid.net/mailman/listinfo/openid-aiim</a><br>
</blockquote>
</div>
<div><br clear="all">
</div>
<div><br>
</div>
<span class="gmail_signature_prefix">-- </span><br>
<div dir="ltr" class="gmail_signature">
<div dir="ltr">
<table width="600" cellspacing="0" cellpadding="0" border="0" style="font-size:13px;padding:32px 0px;font-family:-apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,Helvetica,Arial,sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol"">
<tbody>
<tr>
<td width="44" style="vertical-align:top;padding:0px 16px"><img src="https://lh6.googleusercontent.com/t9ujvLE5ixncgTZdMRypM3BVdboAHbvIP0ENG6TwOqyegNnox4CtJXTNCyp7v7u3N-D6hxkZFn_N2GAttGtVtIAJkg7k7kp4K4GJGFH4WjlSfRyE0jXPP9MW1NXgMDVlPV4iZJjt" width="71" height="129" style="font-family: Arial; font-size: 14.6667px; margin-left: 0px; margin-top: 0px;"><span style="font-family:Arial;font-size:14.6667px"></span><br>
</td>
<td width="16" style="border-left:1px solid rgb(212,212,212)"></td>
<td style="vertical-align:top"><span style="display:block;padding-top:10px;line-height:0px;font-size:15px;font-weight:bold"><br>
</span><span style="display:block;padding-top:10px;line-height:0px;font-size:15px;font-weight:bold">Alex Babeanu</span><span style="display:block;padding-top:10px;line-height:0px;font-size:15px"><br>
</span><span style="display:block;padding-top:10px;line-height:0px">Lead Product Manager, AI Control Suite</span><span style="display:block;padding-top:10px;line-height:0px;font-size:15px"><br>
</span><span style="margin-bottom:16px;color:rgb(76,76,76)"><font style="vertical-align:inherit"><font style="vertical-align:inherit"><br>
t. +1 604 728 8130</font></font><br>
<font style="vertical-align:inherit"><font style="vertical-align:inherit">e. </font></font><a href="mailto:alex.babeanu@indykite.com" style="color:rgb(17,85,204)" target="_blank"><font style="vertical-align:inherit"><font style="vertical-align:inherit">alex.babeanu@indykite.com</font></font></a> <br>
<font style="vertical-align:inherit"><font style="vertical-align:inherit">w. </font></font><a href="http://www.indykite.com/" style="color:rgb(17,85,204)" target="_blank"><font style="vertical-align:inherit"><font style="vertical-align:inherit">www.indykite.com</font></font></a></span></td>
</tr>
</tbody>
</table>
</div>
</div>
</blockquote>
</div>
</div>
</blockquote>
</div>
-- <br>
Openid-aiim mailing list<br>
<a href="mailto:Openid-aiim@lists.openid.net" target="_blank">Openid-aiim@lists.openid.net</a><br>
<a href="https://lists.openid.net/mailman/listinfo/openid-aiim" rel="noreferrer" target="_blank">https://lists.openid.net/mailman/listinfo/openid-aiim</a><br>
</blockquote>
</div>
</blockquote>
</div>
</blockquote>
</div>
-- <br>
Openid-aiim mailing list<br>
<a href="mailto:Openid-aiim@lists.openid.net" target="_blank">Openid-aiim@lists.openid.net</a><br>
<a href="https://lists.openid.net/mailman/listinfo/openid-aiim" target="_blank">https://lists.openid.net/mailman/listinfo/openid-aiim</a><br>
</div>
</blockquote>
</div>
<br>
</div>
</blockquote></div>