
AI Agent Identity and Provenance
Uber is building a robust identity and access management system for AI agents to ensure accountability, auditability, and security as agentic autonomy increases. This involves establishing verifiable cryptographic identities for agents, propagating execution context across agent hops, and integrating with existing security infrastructure. The goal is to provide clear attribution for agent actions, enabling fine-grained access control and comprehensive auditing, ultimately fostering trust in AI-d. Uber has developed the first generation of its Legal Redlining Agent (LRA), an AI-powered assistant integrated into Microsoft Word. LRA reviews contract edits, detects intent, recommends policy-aligned responses, generates structured comments, and flags risks. It has achieved over 20% reduction in contract review time and 91% accuracy in AI-generated decisions. The agent has evolved through multiple iterations, starting with RAG, then incorporating a robust feedback loop for continuous learning and adapting to lawyer preferences. A key refinement involved a dedicated LLM call for tone modulation, guided by legal team input on prompt anatomy to ensure appropriate communication style. The system leverages Uber's GenAI Gateway and has demonstrated significant improvements in efficiency and accuracy.
Timeline






























