Identity as a lifecycle, not a setting

This post introduces the concept of treating agent identity as a lifecycle rather than a static setting. It advocates for just-in-time (JIT) credential provisioning, scoped to specific tasks, and programmatic revocation upon task completion. This approach aims to eliminate standing privilege for agents, which is crucial given their ephemeral and non-deterministic nature. The post highlights the operational feasibility of JIT access for agents compared to humans and references OpenID Provider Commands for standard lifecycle operations. It emphasizes that authorization must be continuous and evaluated at runtime, with the agent's lifecycle management enabling this.