Identerati Office Hours
A livestream about identity standards and the people who write them. Every episode is archived here.
AI agents are rapidly moving from assistants that generate suggestions to systems that can transact. That changes the security model: the important question is no longer just “What did the AI say?”…
Identity infrastructure answers who called. Agentic systems must also answer what was actually running. Imran Siddique, Chief Platform Officer at OPAQUE, will show how hardware attestation can verify…
The Linux Foundation Agentic AI Foundation (AAIF) recently accepted the agentgateway open source project as the fourth project alongside MCP (spec), AGENTS.md, and Goose. Conceptually, an…
An Agent Trust Registry is a system that maintains an identifier, verified provenance, trust, policy, and behavioral metadata about AI agents, autonomous workloads, and machine actors so that other…
Topics to cover: Adoption, Measurement, Recovery and migration, Residual threats, Transaction security, Phishing-resistant accounts not only phishing resistant credentials, relationship to digital…
How could social media networks do a better job at personal identification? How to preserve both anonymity and accountability.
AWS’s new open source Dogwood project extends Cedar with temporal policies that govern what an agent can do based on what happened earlier. Dogwood can express rules like “approval must happen…
Celebrate! You (or maybe your boss) has found THE killer identity startup -- it solves a long-standing problem in your Enterprise Identity ecosystem and they're eager to deploy a free Proof of…
Since joining the CNCF, Cedar is evolving from an AWS-originated policy language into a vendor-neutral community project with broader governance and a growing ecosystem. We’ll explore how Cedar’s…
Fresh off 2026-07-28 MCP spec release, there's no better time to zoom in on MCP authorization. This session focuses on how auth has grown up in the new spec. Authorization now sits cleanly on OAuth…
AI agents are non-deterministic, often taking actions unpredictable at provisioning time. Traditional models (RBAC, ABAC) confirm identity, but they can't validate purpose. Intent-Based Access…
Every identity team is racing toward AI agents, but most can't yet answer a simpler question: can they see and govern the non-human identities they already have? Service accounts, tokens, and…
We use analytics cookies to measure which pages are useful, so we can improve them. They are only set if you accept. Essential cookies needed for the site to work are always on. See our privacy policy.
