Identity & Access
Human/AI dual identity model; COSE-signed credentials; scoped agent privileges.
Humans and AI agents are managed as distinct identity types. Agents receive COSE-signed credentials as non-human identities with narrowly scoped privileges.
Agent identities never borrow human accounts — the audit question "whose action was this" always has a clear answer.